Security Engineer - IV

$145,600 - $166,400/Yr

The Judge Group - San Jose, CA

Full-time - Mid Level

San Jose, CA

Administrative and Support Services

About the position

The Security Engineer - IV role focuses on ensuring security by design in product engineering and architecture for the Verizon Consumer Group. The position involves conducting security assessments, collaborating with cross-functional teams, and implementing security controls and tooling for various platforms including mobile, web, and cloud services. The engineer will evaluate security postures, manage multiple projects, and participate in architectural discussions to enhance security measures across products and services.

Responsibilities

• Conduct security assessments for products and solutions developed by the Verizon Consumer Group.
• Collaborate with cross-functional teams to create, define, and implement security controls and tooling.
• Evaluate security postures and recommend improvements for Mobile Platforms, Web, Embedded applications, IoT Devices, and Cloud services.
• Build threat models, conduct design reviews, and document mitigation techniques.
• Manage multiple projects with significant impact and complexity to support internal business unit security requirements.
• Participate in architectural discussions to ensure success in building or migrating cloud infrastructures and applications.
• Support projects at various levels, evaluating end-to-end environments of different service types and client platforms.
• Continually evaluate new threats and attacks to identify impacts on business and develop appropriate security controls.
• Apply cryptographic primitives and protocols for authentication, authorization, and data protection.
• Develop architectural documentation, white papers, and best practices for security.
• Train and coach engineering teams on integrating CI/CD pipeline tools and vulnerability assessment tools.

Requirements

• Bachelor's degree in Computer Science or related fields.
• Seven or more years of relevant work experience.
• Strong knowledge of cyber security principles, standards, and control frameworks.
• Experience performing security assessments and control gap analyses for cloud-based and mobile-embedded platforms.
• Familiarity with OWASP Top 10 vulnerabilities and cryptographic algorithms.
• Ability to communicate and resolve complex security or operational issues.
• Engineering or development experience in programming languages such as Java, JavaScript, Python, Scala, C++/C, or Swift.

Nice-to-haves

• Master's degree in Computer Science or equivalent engineering experience.
• Direct experience with implementing Security Services and tools in AWS.
• Experience with storage technologies and networking security tools.
• Experience with configuration tools and vulnerability assessment tools.
• Container Security experience with Docker, ECS, Kubernetes.
• Experience with configuration languages and Infrastructure as Code (IaaC).
• Understanding of various types of exploits, threat modeling, and attack surfaces.
• One or more cyber security certifications such as AWS Certified Solutions Architect or CISSP.

Benefits

• Competitive hourly salary ranging from $70.00 to $80.00 USD.