Principal Security Engineer, Delivery Hero

• Solid understanding of cloud security concepts and Zero Trust principles
• Solid understanding of DevSecOps model and ‘shift-left’ security
• 8 years of experience in Security Engineering
• Experience with Windows and Linux operating systems
• Familiarity with AWS and GCP
• In-depth knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls
• Familiar with management frameworks, such as International Organization for Standardization (ISO) 2700x, NIST and PCI/DSS
• Familiar with risk-based security management and their impact to the business impact
• Familiar with vulnerability assessment methods including container scans, network scans, application penetration testing and remediation methods
• Working knowledge of network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts

Desirable

• As part of the Security Task Force you help us to review solution architecture and provide security recommendations to development teams
• Assist with threat modeling
• Investigate and recommend innovative technologies or methods to enhance the security of cloud-based environments
• Research security tooling and provide resolution on day-to-day security issues
• Analyze data, trends, logs and reports and present data in an organized, professional manner
• Establish technical and process related documentation and references
• Ability to interact with company personnel at all levels and across all business units and organizations, and to comprehend business imperatives
• Provide guidance to and assists in training less experienced Cyber Security Specialists and help experienced security professionals pivot to cloud security concepts