Cyber Security Engineer I - (Application Security)

Walgreens Boots Alliance - Deerfield, IL

Full-time - Entry Level

Deerfield, IL

5,001-10,000 employees

Health and Personal Care Retailers

About the position

As a Cyber Security Engineer I specializing in Application Security at Walgreens, you will be responsible for the building, configuring, testing, and management of the organization's information application security platforms. This role is crucial in ensuring the integrity of the organization's networks, systems, applications, and data. You will design, build, operate, and automate security solutions and processes that protect these critical assets. In this position, you will work collaboratively as a team member on problems of moderate scope, complexity, or diversity. You may lead small projects and typically work on assignments that span multiple technology platforms and business areas. Your responsibilities will include the installation, configuration, testing, and maintenance of various security tools, such as vulnerability scanning, penetration testing, and application security tools including IAST, DAST, and MAST. You will conduct scoping, scheduling, analysis, and report writing for penetration tests, recommending and implementing solutions based on your findings. Additionally, you will participate in identifying and implementing additional security controls, continually evaluating and upgrading security features to adapt to new threats. Collaboration with internal technology groups, development teams, and partners will be essential as you develop, implement, maintain, and monitor security policies and procedures. Monitoring compliance with security standards and conducting periodic security audits using techniques such as ethical hacking and penetration testing will also be part of your role. You will be expected to effectively resolve problems and roadblocks as they arise, ensuring that the organization's security posture remains robust and effective.

Responsibilities

• Responsible for configuration, testing, and management of the organization's information security architecture
• Designs, builds, operates and automates security solutions and processes to protect the integrity of the organization's networks, systems, applications and data
• Works as a team member on problems of moderate scope, complexity, or diversity
• May lead small projects and typically works on assignments of small to moderate scope in multiple technology platforms/business areas
• Responsible for installation, configuration, testing and maintenance of vulnerability scanning, penetration testing, and application security tools (ie. IAST, DAST, MAST)
• Conducts scoping, scheduling, analysis, and report writing for penetration tests
• Recommends and implements solutions
• Participates in identifying and implementing additional security controls
• Continually evaluates and upgrades security features
• Works with internal technology groups, development teams and partners to develop, implement, maintain and monitor security policies and procedures
• Evaluates information security configurations when intrusions have occurred and monitors the effectiveness of implemented changes
• Monitors overall compliance with security standards and conducts periodic security audits using techniques such as ethical hacking and penetration testing
• Effectively resolves problems and roadblocks as they occur
• Performs network security audits and testing and evaluates system security configurations to ensure efficacy and compliance with policies and procedures

Requirements

• Bachelor's degree and at least 1 year of experience in IT Industry or High School/GED and at least 4 years of experience in IT Industry
• Knowledge of security protocols and standards, vulnerability assessment tools, packet analyzers, scripting languages and security management suites, penetration testing tools and countermeasures and mitigation techniques applied to web applications
• Experience with security applications engineering and/or security infrastructure engineering
• Willing to travel up to/at least 10% of the time for business purposes (within state and out of state)

Nice-to-haves

• Bachelor's degree in Computer Science, Information Technology, or Information Security
• Experience in Application development and penetration testing
• Experience in Vulnerability scanning and associated tools
• Experience with DAST/ SAST/MAST/IAST
• CISSP or CEH Certification