Salary Range: 140000 to 160000 (Currency: USD) (Pay period: per-year-salary)

How will you contribute?

• Provide guidance on security architecture, technologies, and best practices under the direction of senior security staff.
• Assist in the design and implementation of security solutions for hosts, databases, applications, and APIs.
• Perform risk assessments, security reviews, and threat modeling for important projects and systems, under supervision.
• Work with cross-functional teams to facilitate the integration of security into the software development lifecycle, including CI/CD pipelines.
• Help enforce security policies, standards, and procedures, ensuring compliance with industry regulations and internal requirements.
• Support the response and forensic investigation of significant security incidents.
• Assist in the deployment of advanced security measures such as zero-trust architectures, intrusion detection systems, and threat hunting strategies.
• Work alongside Security Architects to evaluate security controls and technologies for various systems and applications.
• Provide expertise in security discussions with internal stakeholders and, where needed, with customers, partners, and regulatory bodies.
• Contribute to security automation initiatives to enhance process efficiency and reduce manual tasks.
• Participate in red team exercises and vulnerability assessments to help identify system and application weaknesses.
• Engage with leadership to ensure that security initiatives support business objectives and strategies.
• Stay updated with the latest security threats and trends by attending industry forums, conferences, and participating in research activities.
• Support legal and compliance teams to ensure compliance with privacy laws and data protection standards.
• Assist in the development and updating of incident response plans, playbooks, and communication strategies.
• Evaluate new security technologies and tools, providing recommendations to enhance security.
• Support the organization during audits and compliance assessments.
• Help create and maintain comprehensive security documentation and training materials for various audiences.
• Assist in educating developers on secure coding practices, facilitate workshops, and offer guidance on secure code writing to reduce vulnerabilities.
• Contribute to the design and implmentation of security measures that address continuity and disaster recovery planning.

What will you bring?

• A Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent combination of education and relevant experience.
• A minimum of 7+ years of IT experience, with 5+ years of dedicated security experience.
• Practical experience in designing and implementing security solutions, including firewalls, intrusion detection systems, authentication systems, etc.
• Strong understanding of network security, network technologies, and monitoring tools.
• Significant experience in conducting automated security tests, with a good understanding of industry standards such as NIST controls.
• Capable of delivering security tests across CI/CD pipelines using various testing methodologies (SAST, DAST, runtime testing).
• Experience in developing security practices for multiple Infrastructure-as-a-Service (IaaS) platforms (AWS, GCP, Azure, vSphere).
• Familiarity with container technologies and orchestration platforms such as Docker, Kubernetes, Cloud Foundry.
• Experience with configuration management technologies (Puppet, Chef, SaltStack, etc.).
• Strong knowledge of both Linux and Windows platforms.
• Understanding of build and packaging processes in a Linux/Java environment (Maven, rpm, etc.).
• Programming and scripting skills (Python, Ruby, GO, Bash, etc.).
• Ability to discuss and articulate more technical and complex security topics (in addition to risk management concepts and the process of risk assessments).
• Exhibit good judgement in managing workload, including when to communicate project risks.
• In-depth understanding of cybersecurity principles, practices, and methodologies.
• Familiarity with common cyber threats, attack vectors, and vulnerabilities.
• Experience securing cloud environments, such as AWS, Azure, or Google Cloud.
• Proficient with incident response procedures and best practices.
• Expert with vulnerability management tools and practices.
• Knowledge of cryptographic protocols and key management.
• Proficiency in scripting languages (e.g., Python, PowerShell) to automate security tasks.
• Dedication to staying updated with the latest security trends, tools, and techniques.
• Proficiency in creating clear and comprehensive security documentation, reports, and procedures.
• Familiarity with relevant regulations (GDPR, HIPAA, etc.) and industry standards (ISO 27001, NIST).
• Effective communication skills to collaborate with cross-functional teams and convey security concepts to non-technical stakeholders. Work Authorization/Security Clearance (if applicable)


We are not providing sponsorship at this time.