Security Engineer 🔥
Primary Responsibilities
- Implement, maintain, and manage intrusion detection and prevention technologies.
- Implement, maintain, and manage security information and event management (SIEM).
- Implement, maintain, and manage Data Loss Prevention (DLP) technologies.
- Implement, maintain, and manage static (SAST) and dynamic (DAST) code scanning tools.
- Perform vulnerability scans within Cloud architecture including image repositories.
- Assist with incident response including testing and real-time response to incidents.
- Ensure Cloud security configurations meet Corestream requirements and adhere to industry security standards.
- Develop baseline security controls for the Cloud environment.
- Track open security issues and escalate as necessary to ensure awareness and remediation within established SLA’s.
- Stay familiar with latest security technologies and threats, including a focus on Cloud security.
- Proficiency in auditing and securing IaaS, PaaS, and SaaS environments.
- Work closely with Agile technology and development teams to ensure that all Cloud infrastructure is adequately secured.
- Manage multiple competing priorities through effective organization and communication.
Skills and Competencies
- Ability to take initiative and innovate with limited direction.
- Critical thinking and design skills.
- You enjoy working in a dynamic environment where you can develop your skills while taking ownership and pride in everything you build.
- An appreciation for open and constructive dialog with your fellow team members.
- Excellent verbal and written communications skills.
- Familiarity with SaaS based software development patterns and security measures.
- Working with development teams to secure delivery (CI/CD) pipelines.
- Ability to work with development teams in establishing secure development practices.
- Advance certifications such as CISSP (preferred) and/or Cloud specific security certifications.
- Willingness to pursue Cloud certifications focusing on security.
Experience
- BA, BS, or equivalent experience with an Information Security focus is required.
- 4 or more years of experience in Security Engineering is required.
- Experience in auditing and securing IaaS, PaaS, and SaaS environments (preferably Azure, AWS, GCP).Â
- 3 years deploying security best-practices in public cloud environments.
- Prior experience with Agile development methodologies on enterprise-level projects and support.
- Prior experience in secure coding/development practices