Information Systems Security Professional

Role:
Information Systems Security Professional

Hybrid Work

• The Security Ops & Engineering job family is responsible for the operation and engineering of technologies that deliver Security services.
• General areas of responsibility include enforcing authorized access to XXX’s IT & Cloud infrastructure, applications, and services, in addition to prevention, detection, and response to Security threats.
• Positions in Information Security are responsible for designing, operating, and monitoring systems which ensure the integrity and security of XXX’s systems and data.
• The Senior Security Engineer role is a member of the Security Operations & Engineering Team, whose mission it is to operate various platforms that deliver Security Services and to engineer new and enhanced solutions incorporating new and/or existing Security platforms.
• These responsibilities include stewardship of all technologies delivering/supporting Cloud Security, Endpoint Security, Data Security, Identity & Access, Network, Email, and Application Security platforms, including monitoring, operating, restoring, integrating, and extending these technologies, in a manner that achieves our business goals and meets compliance and regulatory objectives.
• This position requires strong partnership with IT, CISO, business, and third-party stakeholders, to ensure that XXX can execute its business plans.
• The Senior Security Engineer is a unique position that requires a broad technical background.
• Key factors for this position are not only technical aptitude, but also being a problem solver, continuous learner, self-starter, and great collaborator.
• The ideal candidate will have experience working – and thriving! – in a fast-paced environment.

• Endpoint:
  Crowd Strike Falcon (AV/EDR, device control, vulnerability scanning, cloud IOA/IOM, FIM), Beyond Trust EPM, Automox patching, Microsoft Intune and Jamf MDM (Bit Locker/File Vault).
• Cloud (AWS US West 2 / US East
  2): AWS WAF, Shield, KMS, Macie, IAM Identity Center (SSO), and Transit Gateway.
• Identity & Access:
  Okta (SSO, MFA, workforce and customer identity, access reviews) and Last Pass.
• Network & Edge:
  Zscaler (SASE, CASB, DLP, web filtering), Cloudflare (Page Shield), F5, Palo Alto firewalls, and Cisco Meraki (Wi-Fi, NAC).
• Email:
  Mimecast (gateway, encryption, DLP) and Valimail (DKIM/DMARC).
• Application Security:
  Git Hub Advanced Security, Sonar, and tfsec (code and IaC review).
• Security Operations:
  SecurityHQ 24x7 SOC, Data Dog SIEM.

• Security Operations and Engineering (80%)
• Ensure that Security technical platforms and Services are always available.
• Ensure that appropriate maintenance, monitoring, automation, and response procedures are in place, to meet Security and availability objectives.
• Triage and respond to security alerts escalated from the SOC/SIEM, in a manner appropriate for level of severity (this could require responding outside normal business hours).
• Support Security investigations as appropriate.
• Provide subject matter expertise and technical stewardship across a broad range of technical platforms and service offerings.
• Conduct operations with excellence, in a quality manner, in accordance with our change control and other documented processes.
• Gather, analyze, and report on Service KPIs.
• Own control evidence for assigned platforms in support of PCI DSS 4.0.1 and SOC 2 Type II audits.
• Partner with IT stakeholders to engineer, implement, and enhance technical platforms and related Service Offerings on an ongoing basis.
• Develop engineering patterns that facilitate the re-use of Services in a safe, efficient, and compliant manner.
• Create/maintain diagrams of Security platforms and integrations.
• Use automation and AI-assisted tooling to improve detection,…