Systems Engineer - III (Risk and Compliance

Systems Engineer - III (Risk and Compliance)

Location:

Kirkland, WA

Work Persona:
Flexible (Hybrid) - 2-3 days in the office at San Diego, CA or Kirkland, WA office.

Note:

This position requires passing a Service Now background screening, USFedPASS (US Federal Personnel Authorization Screening Standards). This includes a criminal/misdemeanor check. Any employment is contingent upon passing the screening. Due to Federal requirements, only US citizens, US naturalized citizens or US Permanent Residents, holding a green card, will be considered.

Duties:

As a Sr Systems Engineer on the Systems Engineering team, you will be responding to and resolving vulnerabilities on VMs and Containers while automating and streamlining process to improve the overall program. Sr Systems Engineer will be an integral part of the System Engineering team and closely partner with the Compliance and Security teams. The role will require a technical understanding of Linux infrastructure and configuration management implementations to improve security.

This position will mainly participate in vulnerability troubleshooting, including reviewing scan results, risk analysis and calculations to identify true risk within the environment and influence and drive remediation.

Primary roles and responsibilities are as follows:

• Monitors, tracks, responds, investigates and reports vulnerabilities and works with the responsible parties in System Engineering and Security teams to drive timely results and remediation
• Partners with stakeholders to drive down vulnerabilities and develop mitigation strategies across the organization.
• Assist with writing and deploying Puppet or Ansible playbooks to resolve vulnerabilities
• Assess and remediate container image vulnerabilities across registries and Kubernetes environments; coordinate vulnerability scanning and patching in containerized workloads
• Write knowledge articles as needed
• Assist with defining hardening policies that will improve our security posture
• Review, consult and prepare for planned change introduction to Service Now environment.
• Partner with teams to plan and execute software code upgrades as needed.

Skills:

• A solid foundation in Linux infrastructure and configuration management tools such as Puppet or Ansible.
• Strong communication skills and the ability to work under pressure
• Proficiency with Kubernetes architecture, cluster operations, and container orchestration; ability to assess security posture of containerized environments
• Hands-on experience with container security scanning tools and vulnerability assessment in container registries (e.g., artifact scanning, image analysis)

The following is a list of requirements for this role:

• Solid understanding of and have experience with most of the following infrastructure services. VMWare, Puppet, Ansible, Imaging, Artifactory, Git
• Working knowledge of container platforms (Docker, Podman) and Kubernetes distributions; experience with Helm or similar K8s deployment tools
• Familiarity with programming language components for java and python
• Strong Coordination & Troubleshooting skills in handling Complex Security Incidents & escalations.
• Solid understanding of Linux
• Hands-on experience with vulnerability management tools and strong technical understanding and experience assessing vulnerabilities and identifying weaknesses in cloud infrastructure services.
• Demonstrated experience with container vulnerability scanning platforms and the ability to triage, prioritize, and remediate container-based vulnerabilities
• Ability to partner with peers who are globally distributed is a key part of this role.
• Strong communication skills and empathy for customers.
• Ability to learn new technology in a fast-paced environment.
• No relocation and no visa sponsorship is offered for this role.