Job details
Job type full-time
Full job description
Job description
Position summary:
This position can be located on site at the headquarters in winston salem, nc or remote within the continental us.
The srSecurity engineer has a strong development experience in numerous programming languagesThis role is the sme for concepts behind security controls and how they apply to application development, web presence and api servicesThis individual is accountable for identifying weaknesses in our security posture within the application or web space while defining methods to achieve security control requirements via automation or highly efficient means that further support timely delivery and minimal overheadThey work in a team of infrastructure specialists and engineers making sure services are delivered and used securely as requiredWorks with and supports third parties to provide security servicesThe srSecurity engineer will advise and enable development and technical teams to make security decisions and provide advice and guidance, ensuring the effective use of common tools and patternsAdditional insights, experience or background in any of the following are also of great value nist, iso27001, data protection, java development, static code analysis, dynamic code analysis, pen testing, containers, microservices, cicd pipeline, agile, github, jira, docker, kubernetes, cloud security (aws, azure, gcp) and design, process maturity, and other related focuses
Primary accountabilities:
Technical (100%)
You will become the primary security expert for multiple product lines, and act as the point of contact for engineering and security.
Perform architecture reviews to steer projects in the right direction, participate in security code reviews, and automate penetration testing against products prior to move to production.
Support engineering with implementing security fixes, ensuring security scanners are utilized correctly, and develop strategies to proactively secure their architecture.
Review development frameworks for security functionality, consistency, and uplift opportunities.
Create threat models and leverage them to prioritize time based on risk impact.
Educate and train product teams.
Evaluate client needs, coordinate design for a solution, and clearly communicate the value proposition of complex and highly technical subjects
Implement and/or assess existing security controls
Translates logical designs into physical designsProduces detailed designs and documents all work using required standards, methods and tools, including prototyping tools where appropriateDesigns systems characterized by managed levels of risk, manageable business and technical complexity and meaningful impactWorks with well-understood technology and identifies appropriate patterns.
Required qualifications:
Bachelor’s degree in computer science, information technology or related field or equivalent work experience requiredMasters degree preferred
7+ years of related work experience in security engineering
Certifications preferredOscp, cissp, gcih, gxpn, gpen
Strong experience in web and mobile application security
Strong experience in distributed platform development security and design
In-depth knowledge of web and mobile security standards and best practices (owasp, etc.)
Strong foundation in core information security principles and concepts (https, tls, oauth, etc.)
Experience with industry tools and technologies such as burp, metasploit, etc.
Working knowledge of common languages such as python, go, javascript, java, etc.
Familiarity in public cloud security deployment and implementation issues (aws, azure, gcp)
Familiarity with audits and standards requirements such iso 27001, pci dss, soc 1 & 2, etc.
Proven expertise in enterprise-grade and web scale security solutions
Excellent communication skills
Ability to explain complex security topics in simple terms
Ability to lead and project manage multiple security initiatives
Identity and access management
Solid working knowledge of physical and logical access
Solid working knowledge of ldap
Solid working knowledge of multi-factor authentication
Solid working knowledge of session management
Credential management
Security operations
Participates in investigations
Participates in operational, criminal, civil, and regulatory investigations
Works with logging and monitoring
Performs security operations granting permissions based on need-to-know and least privilege
Participates in incident management
Manages and configures ids and ips
Software development security
Aware of software development lifecycles
Aware of what software development methodologies are used in the enterprise and can explain what it means
Familiar with devops concepts
Aware of security vulnerabilities and understands how the following work
Bounds checking
Input/output validation
Buffer overflow
Privilege escalation
Aware of secure coding practices
Uses code repositories
Individual competencies:
Teamwork: builds relationships and works cooperatively with others, inside and outside the organization, to accomplish objectives to build and maintain mutually-beneficial partnerships, leverage information and achieve results.
Adaptable: responds to change with a willingness to learn new ways to accomplish work objectives with a positive attitude.
Innovative: ability to develop, sponsor, or support the introduction of new and improved methods, products, procedures or technologies.
Curious: a desire to inquire and learn, to seek new knowledge and wisdom, and to listen to the contributions of others with a genuine interest to better self, the team, and the organization.
Problem solving: gathers and analyzes information to generate and evaluate potential solutions to problems, issues and challenges while weighing the accuracy and relevance of the facts, data and information.
Communication: giving and receiving messages and information in written, oral, and visual formats in a clear and concise way for a complete understanding of meaning and intent.
Collaboration: works collaboratively with others to achieve group goals and objectives.
Effective execution: translates broad conceptual understanding of the company`s strategy into a tactical plan of how it will happen including who will take on which tasks in what sequence, how long those tasks will take, how much the tasks cost, and how each task affects subsequent activities.
The physical demands described here are representative of those that must be met by an associate to successfully perform the major job responsibilities (essential functions) of this jobReasonable accommodations may be made to enable individuals with disabilities to perform the major job responsibilitiesThis job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the job.
While performing the duties of this job, the associate is:
Regularly required to use hands to finger, handle or feel objects, tools or controls, and reach with hands or arms.
Regularly required to talk or hear and read instructions on a computer monitor and/or printed on paper.
Occasionally required to stand, kneel or stoop, and lift and/or move up to 25 pounds.
Regularly required to view items at an extremely close range and must be able to adjust and readjust focus.
Occasionally: job requires this activity up to 33% of the time
Frequently: job requires this activity between 33% - 66% of the time
Regularly: job requires this activity more than 66% of the time
Safety:
Support a safe work environment by following safety rules and regulations and reporting all safety hazards.
As an inmar associate, you:
Put clients first and consistently display a positive attitude and behaviors that demonstrate an awareness and willingness to listen and respond to clients in order to meet their short-term and long-term needs, requirements and exceed their expectations.
Treat clients and teammates with courtesy, consideration and tact; you also have the ability to perceive the needs of internal and external clients and communicate effectively with the objective of delighting and retaining the client.
Build collaborative relationships and work cooperatively with others, inside and outside the organization, to accomplish objectives, develop and maintain mutually-beneficial partnerships, leverage information and achieve results.
Set and attain achievable, yet aggressive, goals with a sense of urgency and accountability.
Understand that results are important and focus on turning mission into action to achieve results following the principles of flawless execution while consistently complying with quality, service and productivity standards to meet deadlines and exceed expectations by giving our clients the best possible outcome.
#li-jm1
#li-remote
