Information Security Engineer, ThousandEyes

• ThousandEyes is seeking an exceptional information security engineer with strong project management skills to support our Information Security and Privacy Risk Management function
• We are looking for an information security engineer / project manager that will be aggressive in following up on tasks, achieving deadlines, and holding resource owners accountable to risk remediation plans
• A successful candidate will need strong project management fundamentals and excellent communication skills
• The successful applicant will be performing work in FedRAMP Moderate or FedRAMP High environments, and therefore, must be a U.S. Person (i.e. U.S. citizen, U.S. national, lawful permanent resident, asylee, or refugee). This position may also perform work that the U.S. government has specified can only be performed by a U.S. citizen on U.S. soil
• 5 to 7 years of experience in the Information Security or related domain[s]
• BS or MS degree in Computer Science (or equivalent)
• Practical use and implementation of information security principles and practices; Understanding of IT methodologies, such as the software development lifecycle, secure infrastructure as code and related operations
• Familiar with vulnerability management tools
• Understanding of cloud computing services
• Strong scripting skills, automation and containerization

Desirable

• The Information Security Risk Management team is responsible for managing and mitigating risks faced by ThousandEyes to protect its systems, services and data
• The security engineer role will be highly engaged with all aspects of the risk assessment process
• Analyze vulnerabilities to determine risk, and remediation and/or mitigation steps
• Track remediation tasks, engage with systems/services owners and stakeholders to ensure vulnerability management compliance
• Investigate and report threats or software issues, recommend and drive remediation
• Assist with enterprise-wide risk assessment processes and specifically with application security assessments
• Coordinate cross-functional team meetings to remediate previously identified security risks and close out pending action plans
• Proactively assess potential areas of risk and opportunities of vulnerability in the network
• Interact with internal and external customers on security-related projects and operational tasks
• The individual must have a strong background in Python, shell scripting, and database knowledge. He/she/they must possess strong organizational skills, be action oriented, results driven, and work with minimal direction