IT security Engineer

Responsibilities:

The Senior Information Security Engineer is responsible for the implementation, execution and maintenance of technology solutions to mitigate risk, to protect the IT and Engineering environments by reducing the probability of, and to minimize the effects of, damage caused by malware, malicious activities and security events.

The individual will help protect the company by deploying, tuning, and managing security tools across the computing environment, as well as provide security incident response cycle support. They should have a passion and skills for identifying the latest cyber threats. The individual will:

Basic Qualifications

Working knowledge of infrastructure-as-code and CI/CD pipelines tools (i.e. Jenkins, Teamcity, CircleCI etc..)

Lead and participate in major day-to-day operational aspects of the security engineering team including improvement of current security controls while constantly identifying areas of needed improvement

Deep hands-on security experience with cloud providers, such as AWS, GCP, Azure

Understanding of automated security testing approaches and tools

Experience with proactive integration of security into the development process

Lead continuous improvement efforts of out security tools and systems (Concertation on SIEM, IDS, EDR Tools)

Work with our customers (Security Operations, Incident Response, and Product teams) to incorporate high quality security alerting into their operational workflows

Improve overall security practitioner efficiency through process automation

Foster and promote collaboration among all members of the IT, Infrastructure, and Risk Management Departments.

Minimum Qualifications/Requirements

BS or MS in Computer Science or related field

Minimum 7+ years of cybersecurity experience

Must have previous experience performing threat hunting and incident response duties using SIEM tools, cybersecurity management consoles, and ticketing systems

Experience in deployment, development, and maintenance of SIEM

Experience writing and using Ansible server administration scripts, and create simple Python, BASH, or Powershell scripts to automate cybersecurity functions

Scripting experience to automate security operations, alerting, and compliance checks, CI/CD design, deployment, and management

Experience with managing endpoint response and detection infrastructure and endpoints at the enterprise level, including performing upgrades to the back end application and deploying new agent versions to endpoints

Understanding the investigative process and performing triage for cybersecurity incidents

Experience maintaining industry leading security technologies or infrastructure systems in complex technical IT operations environment

Must be detail-oriented and organized with ability to handle competing demands while meeting deadlines

Experience in authentication protocols and frameworks to include OAuth, and AWS IAM

Proactive and motivated; team player with a positive can-do attitude

Strong analytical/problem-solving skills and cross-functional knowledge across multiple IT operational and security disciplines

Ability to communicate technical concepts to a broad range of technical and non-technical staff

Must possess a high degree of integrity, be trustworthy, and have the ability to lead and inspire change