Staff Security Engineer, Primer

• 10+ years of experience in Security and/or Cloud Operations
• Strong written and oral communication skills
• Hands-on experience with AWS
• Direct experience with intrusion prevention systems
• Experience with system logging and SIEM technologies
• Experience with cloud native security tools (e.g., IAM, WAF)
• Experience integrating Okta as an IdP into security processes
• Knowledge of incident response processes and practices
• Hands-on experience with vulnerability management tools, technologies, and methods
• Proven ability to integrate security practices into IT and/or DevOps environments
• Experience automating security processes

Desirable

• As a Staff Security Engineer, you will be a valuable member of the IT and Information Security teams, managing and improving the organizational security posture
• You will help protect sensitive data by implementing and continuously monitoring a secure cloud architecture
• You will work with the security toolchain in cloud environments and support the development of security best practices and standards
• Your responsibilities will also include managing vulnerability scanning and remediation efforts, responding to security alerts under supervision, and leading in root cause analysis
• You will own the DAST and SAST solutions and be a key member of the incident response processes, tracking cyber actions from initial detection to final resolution
• Analyze the organizational security posture and seek improvements on a continuous basis
• Implement and manage security solutions and controls for cloud-based infrastructure, platforms, and applications
• Conduct security assessments and audits of cloud environments to identify and remediate security vulnerabilities and misconfigurations
• Manage and optimize cloud-based security tools (e.g., EDR solutions)
• Respond to security alerts and conduct root cause analysis
• Perform incident response and track cyber actions from initial detection to final resolution
• Work with the IT team to broaden the Zero Trust framework
• Collaborate with cross-functional teams, including DevOps, IT, and development teams, to integrate security into the software development lifecycle (SDLC) and DevSecOps practices
• Automate security solutions to drive continuous compliance across the infrastructure
• Stay up-to-date with industry trends, emerging threats, and best practices in cloud security, and recommend security enhancements and improvements as needed