Principal Engineer - Infrastructure and Cloud Security Engineer

Description

The company's Technology Strategy, Global Infrastructure and App Security group is looking for a leader who cares about cybersecurity and technology.

You will join a newly formed team that governs infrastructure and cloud security for the GTS Enterprise Network.

You will work with the company's cybersecurity, network security and enterprise network teams to reduce risk, support safe digital change and respond to new threats and weaknesses.

Responsibilities

• Run the team's day-to-day operations, often influencing people outside your direct reporting line.
• Automate and keep improving governance dashboards, scorecards and maturity models that measure and reduce cyber risk, working with the company's India team.
• Help design on-premises network, data center and cloud environments, aligned with the enterprise network and zero trust.
• Work with stakeholders to find gaps and process changes that strengthen security, then use automation to measure whether the program works.
• Build and deliver security awareness and compliance training on network security, drawing on the Mavens program of security professionals who promote Security by Design.
• Take part in active defense, incident response, penetration testing, red team and threat hunt campaigns, and tabletop exercises when needed.
• Prepare executive-level read-outs, metrics and project status reports that show how well the team is doing.
• Carry out short and long term strategic goals, keep stakeholders informed, and build relationships across teams to reach wider organizational goals.
• Coach and mentor network and infrastructure analysts and engineers, and run focused sessions to teach specialized skills.
• Encourage collaboration and personal ownership in problem solving, decisions and process improvements.

Requirements

• Required: a bachelor's degree or 4+ years of work experience.
• Required: 6+ years of relevant experience, gained through work, military service, specialized training or a mix of these.
• Required: background in information security, network technology or technical risk analysis.
• Required: skill writing scripts or programs that parse data, call APIs and build custom tools.
• Even better if you have one or more of the following: experience analyzing large datasets such as netflow, firewall, DNS, proxy and VPN logs to find anomalies.
• Even better if you have one or more of the following: hands-on use of analytics tools such as Splunk, Elasticsearch or Hadoop.
• Even better if you have one or more of the following: experience writing, changing and running Ansible playbooks to automate configuration and orchestrate security changes across varied network devices and servers.
• Even better if you have one or more of the following: ability to build dashboards and visualizations in Grafana.
• Even better if you have one or more of the following: solid grasp of cybersecurity, network defense and investigation frameworks such as NIST CSF, ISO 27000, MITRE ATT&CK and the Lockheed Martin Cyber Kill Chain, applied to network defense.
• Even better if you have one or more of the following: working knowledge of AWS, Azure or OCI, and of Windows, Unix/Linux or OSX.
• Even better if you have one or more of the following: certifications such as CCNA, Network+, Security+ or CISSP.
• Apply even if you do not meet every 'even better' item.

Conditions

Hybrid role with a set work location that includes working from home and at least 3 days per week in the office, assigned by your manager.

You are responsible for following the hybrid work policies.

Scheduled at 40 hours per week.

Benefits

• Health and wellness options including medical, dental and vision, short and long term disability, basic and supplemental life insurance, AD&D, identity theft protection, pet insurance, and group home and auto insurance.
• 401(k) savings plan with a company match.
• Up to 8 paid company holidays and up to 6 personal days per year.
• Paid parental leave, adoption assistance and tuition assistance.
• Up to 15 days of vacation per year for new hires, growing with service.
• Depending on the role, possible premium pay such as overtime, shift differential, holiday pay and allowances.
• Part-time staff may qualify for some of these benefits depending on individual circumstances.
• Pay varies by location and confirmed job-related skills and experience. This is an incentive-based position with potential to earn more. Part-time pay is adjusted to hours.
• Full-time annual salary range for the listed location(s): $120,500.00 - $231,000.00.