Lead Information Security Engineer

The Nasdaq Omx Group • Rockville, MD

318d • Remote

About The Position

The Lead Information Security Engineer is responsible for designing, developing, modifying, adapting, and implementing both short- and long-term solutions to support information technology (IT) needs for new and existing applications, systems architecture, network systems, and applications infrastructure. This role involves reviewing system requirements and business processes, coding, testing, debugging, and architecting on-premise and cloud-based software solutions. The engineer will perform penetration testing, Red Teaming, and risk assessments for cloud-based and on-premise systems. Additionally, the engineer serves as the primary point of contact for a Google cloud-based technology project, designs and implements various information systems security software, and evaluates software fixes to address sophisticated system vulnerabilities. The role also includes conducting security assessments of complex systems, networks, and applications, preparing status reports on security matters, and supporting regulatory compliance initiatives related to industry regulations.

Requirements

• Degree qualified in Computer Science, Information Systems, or related discipline, or equivalent work experience.
• At least 10 years of experience in information security.
• Completed one or more of the following certifications: MCSE, GIAC, GSEC, GCFW, GCIA, GCIH, GISO, GSNA, GCFA, GSLC, GPEN, CISA, CISSP, CCSP.
• Experience with application security tools in areas of DAST, SAST, and Web Application Penetration Testing.

Responsibilities

• Design, develop, modify, adapt, and implement IT solutions for applications and systems architecture.
• Review system requirements and business processes.
• Code, test, debug, and architect on-premise and cloud-based software solutions.
• Perform penetration testing, Red Teaming, and risk assessments.
• Serve as the primary point of contact for a Google cloud-based technology project.
• Design, develop, implement, and solve problems with information systems security software.
• Test and validate solutions to remediate exploitable conditions on applications.
• Evaluate software fixes to address system vulnerabilities.
• Conduct security assessments using penetration tests and ethical hacking tools.
• Prepare status reports on security matters and develop security risk analysis scenarios.
• Review security designs for complex environments.
• Support regulatory compliance initiatives.

Benefits

• Financial security and career development support.
• Health and wellness programs.
• Flexible work arrangements through the NasdaqBlend hybrid model.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Administrative and Support Services
• Education Level: Bachelor's degree