Security Engineer, Sumo Logic

• We are seeking a highly skilled Security Engineer to join our growing Security team
• The ideal candidate will have a strong background in security engineering, vulnerability management, and automation within a DevOps environment
• Proven experience in security engineering, with a focus on automation and vulnerability management
• Strong knowledge of security tools and technologies such as SumoLogic
• Expertise in cloud platforms (AWS), infrastructure as code (CloudFormation, Terraform), and containerization (Docker)
• Proficient in secure SDLC tools (JIRA, Python, Jenkins, Chef, Git, Bitbucket, Github) and methodologies
• Working knowledge of security and privacy laws
• Experience in leading security programs, developing security policies, and conducting security architecture assessments
• Excellent problem-solving skills and the ability to work independently as well as part of a team
• Strong communication skills, with the ability to present complex security concepts to technical and non-technical stakeholders
• Bachelor's degree in Computer Science, Information Security, or a related field. Advanced degrees or certifications are a plus

Desirable

• This role will initially focus on security engineering and automation as an individual contributor, with the potential to grow into a managerial position overseeing a team of security engineers
• Security Engineering and Automation:
• Establish and lead comprehensive security reviews, threat modeling, and architecture assessments for cross-team initiatives
• Develop and maintain robust security frameworks, incorporating SAST, DAST, and Bug Bounty initiatives to identify and mitigate security vulnerabilities
• Create and execute strategic roadmaps, aligning security efforts with business goals and ensuring proactive responses to emerging threats
• Implement and manage automated security tools and processes within the CI/CD pipeline to ensure continuous security validation
• Individual Contributor Role:
• Collaborate with cross-functional teams, including IT & Engineering to integrate security best practices into all stages of the software development lifecycle
• Provide hands-on expertise in cloud security initiatives, ensuring alignment with security standards across production environments
• Develop and enforce policies and guidelines, working closely with the DevOps team
• Conduct vulnerability assessments, penetration testing, and security audits to identify and address security gaps
• Participate in security research, investigations, platform hardening, and audits
• Leadership and Growth:
• As the role evolves, take on responsibilities for hiring, supervising, and mentoring junior security engineers
• Lead the development and implementation of incident management processes, providing visibility to peers and executives and ensuring rapid response times
• Collaborate with business units to execute security controls and reduce risk, including handling security investigations and supply chain vulnerabilities
• Lead teams in threat modeling exercises to pressure test technical designs