Principal Security Engineer - Nashville, TN

Job Description

Develops advanced testing tools and methodologies to proactively identify and address security weaknesses. Uses expertise to recognize and escalate complex security violations, ensuring prompt response and resolution. Contributes to compliance assessments, evaluating the effectiveness of security controls and processes. Recommends best practices and independently applies data security tools and techniques, such as encryption, hashing, masking, and access management, to ensure the confidentiality and integrity of sensitive information.

Responsibilities

Key Responsibilities

Security Monitoring - Security Tool Design and Development:

- Conductssecurity assessments of various products and services, analyzing potentialvulnerabilities and recommending mitigation strategies.

- Develops advanced testing tools and methodologies to proactively identify and addresssecurity weaknesses.

- Conductsin-depth security design and coding (e.g., reviewing code, writing code for complex investigation), providing advanced guidance and recommendations for improvement.

- Participates in reviews of security alerts.

Event Response:

- Usesexpertise to recognize and escalate complex security violations, ensuring prompt response and resolution.

- Takes appropriate action to contain and mitigate security events, coordinating with relevantteams and stakeholders.

- Contributes to post-event reviews, providing insights and recommendations for strengtheningevent response processes.

Compliance:

- Contributes to compliance assessments, evaluating the effectiveness of security control sand processes.

- Reviewssecurity compliance deliverables, providing recommendations for enhancingadherence to internal and external obligations.

- Ensures compliance with internal and external obligations, collaborating with relevantstakeholders to implement necessary measures.

- Ensuresinventory systems are maintained and remain compliant from a securityperspective.

Business Continuity Support:

- Provides guidance on business continuity and disaster recovery plans, processes, and procedures, considering potential risks and vulnerabilities.

- Ensures the execution of business continuity plans to support critical systems and dataduring disruptions, implementing appropriate measures and controls.

- Assessesreadiness for certification and/or audit, providing insights and recommendations for enhancing preparedness.

Data Security and Privacy:

- Recommendsbest practices and independently applies data security tools and techniques,such as encryption, hashing, masking, and access management, to ensure theconfidentiality and integrity of sensitive information.

- Conductsthorough reviews of documentation and procedures related to data security,identifying and recommending improvements to enhance overall security posture.

Research and Innovation:

- Appliesindustry security knowledge through engagement in research activities and collaboration with colleagues to contribute to the development of innovativesecurity solutions.

- Staysupdated on emerging trends and evolving threats, identifying potentialimplications for the organization and recommending appropriate actions.

- Exploresand evaluates novel techniques and technologies to address complex securityproblems.

Core Responsibilities

Planning& Execution:

- Managesand coordinates moderately complex tasks, monitoring timelines and deliverables to ensure timely completion and adherence to requirements for a moderatelysized project or initiative.

- Efficientlydelegates, monitors, and prioritizes work across multiple projects, providing technical oversight and adjusting plans to address shifts in resources ortimelines.

Collaboration& Partnership:

- Collaborates across the organization to align on expectations and achieve shared objectives.

- Leveragesunderstanding of business leaders, stakeholders, and/or customers to ensureproposed solutions meet their needs.

- Supportsinclusivity by actively seeking and listening to diverse perspectives, ensuringothers feel heard and respected.

Problem Solving:

- Identifies and addresses moderately complex issues by analyzing a wide range of dataand/or information to identify solutions in accordance with standard practices.

- Proactivelyescalates unresolved or critical issues with a thorough assessment and suggestspotential solutions.

- Reviews,contributes to, and documents problem solving strategies.

Continuous Learning:

- Pursueslearning opportunities to expand knowledge and skills and/or tools in new areasand stays abreast of the latest industry trends and best practices.

- Proactively seeks and leverages ongoing feedback and training to improve skills.

- Coaches and mentors junior team members, fostering continuous learning and knowledge sharing within and across teams.

Continuous Improvement:

- Developsideas, recommends updates, and/or collaborates on the implementation of process improvements to increase the efficiency and effectiveness of processes,protocols, and workflows across teams, and evaluates the impact on key stakeholders.

-…