Cloud & Endpoint Security Engineer
Merrill - Minneapolis, MN
posted 4 days ago
About the position
The Cloud and Endpoint Security Engineer plays a crucial role in the organization by serving as a subject matter expert (SME) combining technical expertise with a strong understanding of business needs to create impactful solutions that drive a risk-centric strategy properly securing all digital and physical assets within the organization. This engineer provides technical proficiency in efficiently completing projects and tasks as a member of a technology support and services team. This role is a self-starter and collaborates within IT, with peer groups, and with vendors to provide world-class security solutions. This role will participate in on-call providing 24/7 coverage. Required for this role is a high energy, experienced, and self-motivated modern-technology-focused engineer who is responsible for secure operations of computing platforms in Azure, AWS, and Google Cloud as well as the securing of Mac, iOS, and Windows endpoints. Classifying digital assets according to departmental access policies is an on-going duty for this role. This role is key in the design and management securing devices and device integration to core systems, including virtualized desktops as well as securing systems supporting the needs of the enterprise. The successful engineer is an advanced technical subject matter expert who can apply knowledge and research to deliver innovative solutions to the business, including automation at every opportunity. Strong documentation skills are required as this role works closely with other teams within IT as well as Information Security and Compliance teams. The ideal Security Engineer is organized, analytical, capable of solving business problems through technology, and has a strong drive and passion for developing a culture of security-first through knowledge sharing, mentoring, and excellent communication. They also continuously develop knowledge of evolving best practices through peer benchmarking, industry events/associations, and educational opportunities. The right engineer is a passionate, results-oriented technologist who enjoys learning new technologies and getting elbows deep with something new; someone who has spent years honing knowledge and skills in endpoint and cloud-centric technologies. The engineer is a natural and inspired learner who is always seeking to solve problems, learn new possibilities, and exploit opportunities that move the business forward securely. The individual is someone that people notice and commend on their Customer Service skills.
Responsibilities
- Designing and implementing secure cloud infrastructure, applications, and networking.
- Configuring and managing security controls within cloud platforms, including file access security and management identifiers.
- Monitoring security posture and responding to security incidents.
- Working closely with Security and Compliance teams in conducting vulnerability assessments and risk analyses.
- Patch management to keep cloud resources up to date with security fixes.
- Ensuring endpoint devices (laptops, desktops, servers, and mobile devices) are secure.
- Implementing and managing endpoint protection tools.
- Investigating and remediating security incidents related to endpoints.
- Collaborating with cross-functional teams to design and implement cloud and endpoint security solutions.
- Developing and coordinating cloud security procedures and disaster recovery plans.
- Maintaining documentation and diagrams for security tools, system environments, and cloud operations.
- Acting as a subject matter expert (SME) for security tools and processes.
- Ensuring compliance with relevant standards.
- Mitigating risks and meeting business objectives through appropriate security controls.
- Developing and managing a comprehensive classification framework for digital assets.
Requirements
- Bachelor's degree in IT or related field or equivalent experience is required.
- 10+ years information technology security experience in an enterprise environment.
- 7+ years security-centric architecture and leadership experience.
- Proficiency in cloud platforms like AWS, Azure, or Google Cloud.
- Adept in endpoint security tools for Windows, Mac OS, and iOS.
- Strong grasp of security principles, including encryption, access controls, authentication, and authorization.
- Knowledge of network protocols, firewalls, VPNs, and intrusion detection/prevention systems.
- Ability to manage user access, roles, and permissions within cloud environments.
- Familiarity with compliance frameworks and their application for endpoints and in cloud environments.
- Experience with scripting for automating security tasks.
- Understanding incident handling, forensics, and recovery processes.
- Experience with Agile/Scrum/Kanban process and environments.
- Adept in at least one programming language.
- 5+ years documentation experience.
- Knowledge and understanding of diverse platforms and operating systems, including current and emerging technologies.
Nice-to-haves
- Security-related certifications.
- Experience with data classification and governance, with a strong understanding of data lifecycle management.
- Excellent communications skills, relationship skills, and customer service attitude working with highly-technical and non-technical personnel across all levels of the organization.
- Exceptional organization and analysis skills, sophisticated problem-solving ability, and functions well within a team, willing to train and cross-train staff.
- Works in partnership with teams across the organization on multiple efforts simultaneously and delivers continuous results and improvements.
- Takes personal ownership for outcomes and performs well with light direction, input, and feedback.
Benefits
- Open to remote work.
- Occasional travel to Minneapolis, MN headquarters office.
