Sr Security Engineer; CSIRT

Overview

Frontdoor is reimagining how homeowners maintain and repair their most valuable asset – their home. As the parent company of two leading brands, we bring over 50 years of experience in providing our members with comprehensive options to protect their homes from costly and unexpected breakdowns through our extensive network of pre-qualified professional contractors. American Home Shield, the category leader in home service plans with approximately two million members, gives homeowners budget protection and convenience, covering up to 23 essential home systems and appliances.

Frontdoor is a cutting edge, one-stop app for home repair and maintenance. Enabled by our Streem technology, the app empowers homeowners by connecting them in real time through video chat with pre-qualified experts to diagnose and solve their problems. The Frontdoor app also offers homeowners a range of other benefits including DIY tips, discounts and more. For more information about American Home Shield and Frontdoor, please visit

Summary :
As a Sr Security Engineer at Frontdoor, you will be responsible for the security of all services offered by Frontdoor and providing complex security support for engineering teams leveraging those services. The Frontdoor Info Sec team works with micro-service, application and mobile development teams to design and build secure solutions, participate, and coordinate cross-organization security initiatives, and solve security challenges s individual will participate or lead complex security due diligence efforts and plan security integration.

The role requires partnering with business sponsors Frontdoor Engineering to identify and implement actionable plans to achieve remediation of security threats and diving deep into tactical security aspects of our services. Successful Security Engineers at Frontdoor are self-starters, able to work autonomously, natural problem solvers, collaborative, and not fazed by adversity or ambiguity. In addition, you should have strong problem-solving skills, excellent communication skills, and a deep technical understanding of modern cloud security architectures.

Responsibilities:

• Helpe lead team to develop a complete security stack that provides endpoint management, vulnerability management, DDoS protection, data protection, and incident management.

• Design and implement APIs for other teams to consume for various security functions.

• Work with engineering teams across Frontdoor to prioritize complex security issues identified during Security Due Diligence and Application Security Reviews. Provide expert advice and consultancy to internal customers on risk assessment, incident triage, threat modeling, and security vulnerability mitigation.

• Partner with multiple teams across multiple locations with varying priorities to ensure timely delivery and secure solutions.

• Lead complex internal process improvement projects, including the development and implementation of internal security tools.

• Provide security guidance documentation and assistance with security metrics delivery and system improvements.

• May include other duties as assigned.

Qualifications

Required Skills:

• Experience in Information Security, Cybersecurity, Identity and Access Management (IAM), and Information Technology to include accountability for complex tasks and projects

• Hands-on experience securing cloud applications and infrastructure (AWS, GCP, Azure)

• Solid understanding of security vulnerabilities, attacker exploit techniques, and methods for remediation

• AWS, GCP, or Azure cloud infrastructures

• Docker, Kubernetes, Istio, Envoy, OPA, Styra

• Elasticsearch, Log Stac k, Splunk, Ops Genie

• Kafka, Mongo
  
  DB, Redis

• Git and Git Lab or Git Hub

• Go, JavaScript, Bash, Python, Java

Preferred

Skills:

• Excellent understanding of cloud infrastructure and services like AWS (EKS, ECS, VPC, KMS, Cloud Watch, Open Search, EC2, S3, Dynamo
  
  DB, Route
  53, Lambda, etc.)

• Experience implementing and leveraging logging and monitoring solutions, Splunk, Elastic, Fluentd, or Prometheus

Minimum Education, Licensure and Professional Certification requirement
:

High school diploma or equivalent required, Bachelor’s degree in…