Job details
Job type full-time
Full job description
This position is responsible for the hands-on tuning and security configuration of the web and content delivery platformResponsibilities include leading the enterprise bot mitigation and fraud detection strategy across web and mobile applications and the portfolio of brands loyalty programsAdditionally, the position is responsible for understanding and interpreting the business and technical requirements of securing the enterprise’s next generation, forward-thinking applications and incident response.
The security engineer position is remote eligible with the ability to be 100% remoteThe person in this role can sit anywhere in the united states with working hours expected to align with our global support center based in atlanta, ga (eastern standard time).
Responsibilities
Design and implement application security solutions which enforce security consistently across internally/externally developed applications
Participate in design reviews with development and project teams
Create/develop security related configurations in cloudflare
Build and craft bot detection and mitigation capabilities
Provide future strategic and tactical plans which affect application security environments and initiatives
Advise platform operations team on public cloud (aws/azure) security configurations that may affect application security
Incident response and analysis
Perform log and event analysis on large amounts of web and mobile application traffic to websites and develop trend reports in effort to correlate suspicious activity and patterns.
Collaborate with internal teams to implement mitigation strategies to stop automated website attacks.
Lead incident response when involving bot attacks and application fraud
Provide easily consumable but detailed evidence for all actions taken.
Education & experience qualifications
Bachelor’s degree preferred and/or combination or prior work experience in the field of information security
4 years related experience in the field of information security
Minimum of 4 years of software development experience
Minimum of 1 year of work experience in application security
Prior retail technology experience preferred.
Prior quick service restaurant experience, a plus.
Required knowledge, skills or abilities
Extensive knowledge of cloudflare and/or imperva, akamai web application firewall configuration and management
Experience with software vulnerability scanning tools
Experience with web application vulnerability scanning tools
Expert python scripting, perl, shell scriptingDevelopment experience in c++, java, java script.
Excellent experience with regular expressions
Solid understanding of web applications, web servers, application firewalls, frameworks and protocols with respect to web application development, deployment, and operation
Extensive knowledge of web technologies and concepts
Strong understanding of tcp/ip, web protocols and networking concepts
Experience in reviewing and analyzing log files and data correlation
Excellent logical and practical understanding of sdlc
Awareness of devops and agile principles
Experience with managing web/application servers
Scripting/programming using python
Excellent understanding and hands on experience with java and/or .net technologies
Excellent knowledge of open source and commercial application security tools and frameworks, including but not limited to kali web application testing tools
Experience in exploiting web apps and web services security vulnerabilities including cross-site scripting, cross-site request forgery, sql injection, dos attacks, xml/soap, and api attacks.
Excellent understanding of owasp risks, vulnerabilities and mitigation mechanisms
Experience with web application firewall management and rules
Well versed in system exploits (e.gBuffer overflows, pth attacks, windows authentication framework etc.)
Excellent understanding of ddos techniques and mitigation mechanisms
Experience with public cloud (e.g., azure, aws, gcp)
Ability to work well under pressure and have great organizational and interpersonal skills.
Skills to be consistently updated based on new software development and hardware technologies.
Ability to meet specific deadlines and work under pressure.
Experience with credit card and rewards program technologies
Word processing, spreadsheet technologies, presentation skills and database experience are necessary.
Ability to rotate `on call` for technical or service challenges which have been escalated beyond our helpdesk(s) regarding store down, critical call assistance or company user request assistance requiredThe rotation requires work during non-corporate business hours including nights and weekends.
Available for job-related light travel.
Inspire brands is a multi-brand restaurant company whose portfolio includes nearly 32,000 arby’s, baskin-robbins, buffalo wild wings, dunkin’, jimmy john’s, rusty taco and sonic drive-in restaurants worldwide.
We’re made up of some of the world’s most iconic restaurant brands, but we’re much more than just a restaurant companyWe’re a team of hundreds of thousands who individually and collectively are changing the way people eat, drink and gather around the tableWe know that food is much more than a staple—it’s an experienceAt inspire, that’s our purpose: to ignite and nourish flavorful experiences.
