Senior Staff Engineer - DevSecOps

## Senior Staff Engineer - Dev Sec Ops Apply locations :
Alameda, CAtime type:
Full time posted on:
Posted Todayjob requisition :
JR6954
** SUMMARY/JOB PURPOSE** **(Basic purpose of the job):
** Protect the organization’s digital infrastructure, data, and systems from internal and external cybersecurity threats by implementing, managing, and continuously improving security practices, tools, and operations with a focus on cloud applications and infrastructure.
** ESSENTIAL DUTIES/RESPONSIBILITIES:
*** Design and implement robust security architectures for cloud environments following best practices, industry standards, and regulatory requirements.
* Lead cross-functional collaboration on technology initiatives to strengthen security across systems and operations, ensuring alignment with organizational objectives and industry best practices.
* Lead the investigation and resolution of complex security events and incidents, including malware outbreaks, unauthorized access attempts, and significant security breaches. Develop and implement response strategies, coordinate cross-functional teams, and ensure lessons learned are integrated into security policies and controls.
* Analyze security logs and events from various sources to proactively develop and implement security measures that address current and emerging threats.
* Provide updates to leaders on latest threat landscape, emerging trends, and propose cybersecurity solutions to proactively identify and mitigate potential security risks.
* Enhance the organization’s security posture by assessing vulnerabilities and recommending solutions to address identified weaknesses.
* Collaborate with internal teams, vendors, and partners to provide guidance and expertise on security best practices and incident response.
* Ensure compliance with industry standards and organizational policies, including SOX and FDA regulatory requirements, by following established procedures and controls.
*
* SUPERVISORY RESPONSIBILITIES:

*** No supervisory responsibilities.
** EDUCATION/EXPERIENCE/KNOWLEDGE &

SKILLS:

**** Education**:
* Bachelor’s degree in related discipline and 9 years of related experience; or
* Master’s degree in related discipline and 7 years of related experience; or
* Equivalent combination of education and experience
* CISSP, CISM, CEH, OSCP, GIAC or similar cybersecurity certification preferred
*
* Experience:

*** Experience with operation and implementation of cybersecurity tools.
* Experience in designing, implementing, and managing security controls within cloud platforms, such as IAM, VPC, Zero Trust principles, IaC, IAAS, Security Groups, Key Management Services, SDLC, Ci/Cd pipelines and Network Security.
* Experience in IT Security or related infrastructure administration role in an enterprise environment. Technical lead or management experience preferred.
* Experience in investigations and response to cyber events and incidents.
* Experience in enhancing organizational security awareness and resilience.
* Experience with cloud, system, and application security.
* Experience administering IT systems.
* Experience working in Agile environments and using ticketing systems (e.g., JIRA, JSM).
* Experience in regulated industries (e.g., biotech, pharma) with knowledge of GxP and SOX compliance preferred.
*
* Knowledge, Skills and Abilities:

*** Strong knowledge of general IT applications and infrastructure.
* Advanced knowledge of CLI and scripting language experience (Python, Power Shell, etc..)
* Advanced knowledge of AWS
* Advanced knowledge of IAC, SDLC, Ci/Cd pipelines
* Advanced knowledge of cybersecurity technologies and concepts.
* Strong analytical, problem solving, organizational, and communication skills.
* Ability to work effectively with customers to solve business challenges while balancing the need for confidentiality, integrity, and availability.
* Ability to multitask and work collaboratively.
* Ability to work with ambiguity.
* Ability to work with confidential data.
* Ability to continuously learn and improve.
* Ability to work with minimal guidance, to adapt to frequent priority changes, and response to ad-hoc requests
* Architect secure cloud infrastructure using…