Lead Security Engineer

Responsibilities

• Support Gartner’s App Sec function.
• Execute daily vulnerability Assessments functions.
• Collaborate with Information Security partners and technology stakeholders to identify risks/vulnerabilities.
• Remediation planning and coordination for security risks.
• Engineer automation solutions and/or security tool integrations.
• Collaborate with business stakeholders to design secure applications and test applications for security weaknesses.
• Mentor engineers and security champions on practical threat modeling techniques.
• Own day-to-day life cycle management including threat assessment and risk avoidance.
• Create actionable reports showing direct impact to the security posture.
• Define and implement metrics to measure the effectiveness of security controls.

• 6 - 8 years of experience in a Security Engineering role.
• Proven experience in Dev Sec Ops .
• Cloud Security and Application Security.
• Experience using vulnerability scanning technologies, AST platforms, and cloud security tooling.
• Formal experience with threat modeling.
• Experience leading projects and resources through direct and indirect leadership.
• Deep knowledge of assessing and prioritization of Risk.
• Cloud experience (AWS, Azure, GCP).
• Infrastructure as Code (IaC) and Policy as Code (PaC) Concepts.
• Scripting or programming experience (Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, Power Shell, Bash).
• Familiarity with technical security controls, guidelines, and frameworks outlined by standards such as SOC2, ISO 27001/27013, NIST 800-53.

• SOC2
• ISO 27001
• ISO 27013
• NIST 800-53