Senior Security Engineer, Opswat
Cyber protection for critical infrastructure
Job no longer available
Cyber protection for critical infrastructure
501-1000 employees
Job no longer available
501-1000 employees
Company mission
To eliminate malware and zero-day attacks.
Role
Who you are
- Bachelor’s degree or college diploma in the field of Information Security, Computer Science, Information Systems, or equivalent experience
- Expert on Microsoft Product Stack
- Full-stack knowledge of IT infrastructure including securing: Applications, Databases, Operating systems (Windows, Unix/Linux and Mac), Hypervisors, IP networks (WAN and LAN), Storage networks, CI/CD pipelines, Backup networks and media, and Containers/Kubernetes
- Direct, hands-on experience knowledge of managing and operating security infrastructure - e.g., firewalls, IDS, IPS, web application firewalls (WAFs), endpoint protection, SIEM, and DLP technology as well as vulnerability and configuration management tools
- Has working experience in Security Assurance: Penetration Testing, Code Review, and Threat Modeling
- Direct experience or strong working knowledge of designing IAM technologies and services using: Active Directory, Azure Active Directory, Privileged Access Management, Multifactor Authentication, and Amazon Web Service (AWS) IAM
- Strong working knowledge of IT service management (e.g., ITIL-related disciplines): Asset management, Configuration management, Incident management, Problem management, Change management, and Vendor/Supplier Management
- One or more of these preferred certifications: CEH, Security+, CISSP, SANS: GCIA, GCDA, GDSA, GSOC, GCED
What the job involves
- The Enterprise Security Engineer mission is to defend OPSWAT’s corporate assets from all threats through risk reduction
- The Enterprise Security Specialist reduces risk to OPSWAT’s corporate assets by advising, implementing, operating, and assuring multiple critical preventive and reactive security controls are in tight collaboration with teams and stakeholders across the company
- As an Enterprise Security Engineer on the operations team, you will be entrusted with the crucial responsibility of safeguarding OPSWAT's corporate environment
- From our versatile laptop fleet (Mac, Windows & Linux) to our innovative SaaS apps and other Corporate Infrastructure, you will play a vital role in ensuring our success and securing our valuable assets
- With a confident and thoughtful approach, you'll build and implement solutions that raise the security bar for our corporate infrastructure
- Contribute to designing and implementing solutions that support enterprise-wide security initiatives
- Design, build, maintain, tune, and enhance the effectiveness of our Enterprise Security controls in a wide range of security domains, including:
- Endpoint Detection and Response (EDR)
- Network Detection and Response (NDR)
- Email Security
- Ransomware Resilience
- Security Information and Event Management (SIEM)
- Data Loss Prevention (DLP)/Insider Risk
- Conditional Access
- Vendor/Business Process Outsourcing (BPO) Security
- Device Posture and Attestation, Shadow IT
- Threat and Vulnerability Management (TVM)
- Identity and Access Management (IAM)
- Identity Protection
- Public Key Infrastructure (PKI)
- Perform risk assessments and security assurance (threat modeling, code review as necessary) on a range of systems that support OPSWAT’s business operations:
- Operating Systems and commercial/open-source desktop applications
- Internally developed Enterprise Infrastructure Services
- Third-Party Software as a Service (SaaS) solutions
- Network Infrastructure (ZTNA, CASB, VPN)
- Cloud Infrastructure (AWS, Azure)
- Collaborate with our Governance Risk and Compliance (GRC) team to help develop enterprise security standards, guidelines, and policies
- Drive the remediation of security vulnerabilities identified through assessments
- Build security automation to secure our corporate infrastructure
- Evaluate cutting-edge Enterprise Security technology designed to increase our security posture
- Partner with our product management teams to provide feedback on the products and roadmap
Our take
Cyberattacks are becoming more sophisticated. For example, zero-day cyberattacks leverage vulnerabilities that are unknown even to the users and creators of a system. Tens of billions of dollars are being invested into protection, but OPSWAT delivers security solutions that nip the need for extra cyber defence in the bud.
The company's products focus on threat prevention, enacting a zero-trust mentality to ensure that technology systems are watertight from threats. For example, OPSWAT's MetaDefender platform incorporates advanced malware threat protection to detect vulnerable files and emails, as well as software, before it is even installed.
It’s this philosophy of “Trust No File, Trust No Device” that makes OPSWAT such a robust partner for the likes of AMEX and the United States Department of Justice. In addition to cyber protection products, the company also helps train future cyber defenders through its academy, which has trained 70,000 professionals so far.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (1 round)
Mar 2021
$125m
GROWTH EQUITY VC
Total funding: $125m
Company benefits
- Excellent insurance programs
- Stock options
- Multifaceted reward program
- Quarterly & annual reviews
- Personalizing appreciation
- Flexible-work arrangements
- Company / Team outings
- Generous PTO policies
- Green, clean office space
- Workout exercise & sports
- Friendly work environment
Company HQ
Westshore, Tampa, FL
Leadership
Benny Czarny
(CEO)Previously Engineering Manager at BindView before founding OPSWAT in 2004.
Share this job
View 9 more jobs at Opswat