Senior Information Security Engineer

This role is for a Senior Information Security Engineer who will be responsible for designing global enterprise security solutions. The candidate will provide technical leadership and oversight to deliver effective security solutions and tools across the organization. They will play a crucial role in aligning the security strategy with execution and enhancing the cybersecurity maturity of the company. The ideal candidate should have a strong technical background, problem-solving skills, and a deep understanding of security best practices and industry standards.

• Perform security and control reviews, identify gaps in security architecture and effectiveness, and develop a security risk management plan.
• Architect, design, and implement global enterprise security architecture and security capabilities for cloud consumer and cloud provider environments.
• Conduct threat modeling to identify, communicate, and understand threats and mitigations within the context of protecting enterprise infrastructure and applications.
• Provide technical leadership and support not only to information security team members but also to IT and areas of business.
• Participate in incident response activities and contribute to the development of incident response plans and procedures.
• Collaborate with third-party vendors and partners to assess their security posture and ensure the security of shared systems and data.
• Stay up-to-date with the latest security threats, vulnerabilities, and technologies to proactively identify potential risks and recommend appropriate security measures.

• 4-6 years of experience in information security or a related field
• Strong technical background and understanding of security best practices and industry standards
• Ability to perform security and control reviews and develop security risk management plans
• Experience in architecting, designing, and implementing global enterprise security architecture and capabilities for cloud environments
• Knowledge of threat modeling and ability to identify and communicate threats and mitigations
• Ability to provide technical leadership and support to information security team members, IT, and areas of business
• Familiarity with incident response activities and development of incident response plans and procedures
• Experience in collaborating with third-party vendors and partners to assess security posture and ensure security of shared systems and data
• Up-to-date knowledge of security threats, vulnerabilities, and technologies to proactively identify potential risks and recommend appropriate security measures

• Technical leadership and support provided to information security team members, IT, and areas of business
• Participation in incident response activities and contribution to the development of incident response plans and procedures
• Collaboration with third-party vendors and partners to assess their security posture and ensure the security of shared systems and data
• Up-to-date knowledge of the latest security threats, vulnerabilities, and technologies to proactively identify potential risks and recommend appropriate security measures
• Solid knowledge within designing and implementing security solutions
• Strong knowledge of security principles, standards, and best practices
• Proficiency in performing security assessments, threat modeling, and risk analysis
• Proficiency in working with IAM, SIEM, XDR, DLP, and vulnerability scanners
• Excellent verbal and written communication skills to communicate complex problems to both technical and executive audiences and influence decision-making process
• Expertise in application, software development life cycle (SDLC), and cloud security highly valued
• Opportunity for guidance and consultation on application, SDLC, and cloud security matters
• Workplace of belongingness that values diversity and inclusivity