Principal Security Engineer

Job Description

Develops advanced testing tools and methodologies to proactively identify and address security weaknesses. Uses expertise to recognize and upscale complex security violations, ensuring prompt response and resolution. Contributes to compliance assessments, evaluating the effectiveness of security controls and processes. Recommends best practices and independently applies data security tools and techniques, such as encryption, hashing, masking, and access management, to ensure the confidentiality and integrity of sensitive information.

• – Conducts security assessments of various products and services, analyzing potential vulnerabilities and recommending mitigation strategies.
• – Develops advanced testing tools and methodologies to proactively identify and address security weaknesses.
• – Conducts in-depth security design and coding (e.g., reviewing code, writing code for complex investigation), providing advanced guidance and recommendations for improvement.
• – Participates in reviews of security alerts.

• – Uses expertise to recognize and upscale complex security violations, ensuring prompt response and resolution.
• – Takes appropriate action to contain and mitigate security events, coordinating with relevant teams and stakeholders.
• – Contributes to post-event reviews, providing insights and recommendations for strengthening event response processes.

• – Contributes to compliance assessments, evaluating the effectiveness of security controls and processes.
• – Reviews security compliance deliverables, providing recommendations for enhancing adherence to internal and external obligations.
• – Ensures compliance with internal and external obligations, collaborating with relevant stakeholders to implement necessary measures.
• – Ensures inventory systems are maintained and remain compliant from a security perspective.

• – Provides guidance on business continuity and disaster recovery plans, processes, and procedures, considering potential risks and vulnerabilities.
• – Ensures the execution of business continuity plans to support critical systems and data during disruptions, implementing appropriate measures and controls.
• – Assesses readiness for certification and/or audit, providing insights and recommendations for enhancing preparedness.

• – Recommends best practices and independently applies data security tools and techniques, such as encryption, hashing, masking, and access management, to ensure confidentiality and integrity of sensitive information.
• – Conducts thorough reviews of documentation and procedures related to data security, identifying and recommending improvements.

• – Applies industry security knowledge through engagement in research activities and collaboration with colleagues to contribute to development of innovative security solutions.
• – Stays updated on emerging trends and evolving threats, identifying potential implications for the organization and recommending appropriate actions.
• – Explores and evaluates novel techniques and technologies to address complex security problems.

• – Manages and coordinates moderately complex tasks, monitoring timelines and deliverables to ensure timely completion and adherence to requirements for a moderately sized project or initiative.
• – Efficiently delegates, monitors, and prioritizes work across multiple projects, providing technical oversight and adjusting plans to address shifts in resources or timelines.

• – Collaborates across the organization to align on expectations and achieve shared objectives.
• – Leverages understanding of business leaders, stakeholders, and/or customers to ensure proposed solutions meet their needs.
• – Supports inclusivity by actively seeking and listening to diverse perspectives, ensuring others feel heard and respected.

• – Identifies and addresses moderately complex issues by analyzing a wide range of data and/or information to identify solutions in accordance with standard practices.
• –…