Security Engineer

Summary The Security Engineer will collaborate with teams to design fine-grained technical controls around access to sensitive datasets and ensure their compliance with the regulatory requirements while providing strong technical support, enabling technical decisions to be made with confidence and at pace. This role generally works a standard business week, but occasional weekend work / out of hours may be required. Responsibilities (Other duties may be assigned.) Carry out Host-Based Vulnerability Assessments Drive the remediation of identified vulnerabilities across multiple departments. Responsible for monitoring and responding to alerts Support incident response in case of a security breach Support and continuously enhance our existing security services for Cloud Collaborate across multiple teams to remove blockers to drive forward implementation Work with internal and external support teams Education and/or Experience      College degree or equivalent work experience 7-10 years in Information Technology, with a comprehensive Security Operational background Experience with security frameworks (NIST, MITRE, CIS, ISO & SOC2) Hands-on experience with the configuration of cloud technologies Knowledge, Skills and Abilities Extensive knowledge of cloud operations and automation Extensive knowledge of key security practices in access control, application security, network security, and security strategy Knowledge of regulatory data requirements in the cloud, aligned with HIPAA, GDPR or other compliance standards Basic understanding of containerization technology Have a strong knowledge of privileged access management, vulnerability management, and threat intelligence Build multilayer working relationships with both technical and business stakeholders, gaining their respect and trust based on your knowledge and professionalism Strong root cause analysis, problem-solving, and analytical skills Excellent communication and analytical skills for incident and problem management as well as stakeholder management Ability to effectively document operational process and procedures Adaptable to a fast-paced work environment and an ability to prioritize projects Technical Skills Basic understanding of DevOps tools (GitHub, Jenkins, Nexus, Ansible, etc.) Basic understanding of SecOps tools (Rapid 7, Cloud Conformity, SUMO Logic, etc.) Excellent understanding of Amazon Web Services (AWS) the AWS shared responsibility model, KMS, CloudTrail, CloudWatch, CloudFormation ,Lambda and GuardDuty Extensive knowledge of SIEM and SOAR tooling Proficient in Linux, Node.js, YAML and JSON Language Skills Ability to speak the English language proficiently, both verbally and in writing. Travel Requirements This position may require up to 10% travel based on business need. Work Environment  The work environment characteristics described here are…