Security Engineer

Responsibilities:

Will deploy, configure, maintain, and troubleshoot security tools on Windows and Linux systems in traditional data centers and in Cloud environments

Will schedule and submit applications for SAST and DAST scanning, following up with development teams for remediation as necessary

Will work with infrastructure teams to maintain information security ; will reviewing legacy systems for patching and mis-configurations;  will review new systems prior to production deployment for security gaps

Will manage program updates on a weekly, and monthly basis 

Manage and review compliance scans for remediation needs.  Work with DevOps and Application teams to identify and schedule remediation as needed

Will provide support for  key parallel security and compliance programs including security analysis, SOX, PCI, and SOC compliance audits

Will serve as subject matter expert for the Global Security Office and other teams within the organization 

Other Duties:

Will collaborate with DevOps team to deploy and maintain SAST as part of DevOps continuous build and deployment

Will Interact with Atlassian systems including the JIRA ticketing system to assign and receive work requests

Work with various teams to review and maintain security hardening standards and review configurations on various systems

Qualifications:

Bachelor of Science -Computer Science, Information System

4+  years of  experience in Security Engineer or cybersecurity role 

4 +  years experience in Dev/Ops in Windows and/or Linux environments and Cloud hosting

An Information Security Certification such as CISSP, CISA, CISM, CEH, Security+

Preferred:

CISSP, CEH, Security+

AWS Security, Linux or Microsoft certifications 

Experience with PCI auditing

Experience with SDLC software development and/ or experience with Agile software development

Experience with Bash, Powershell, PHP languages to aid in security review and analysis

Experience with CIS benchmarking and security tools