Get the chrome extension Junior Security Engineer
Digital Maelstrom
This is a remote position.
Position Overview
This position is within the cybersecurity organization at Digital Maelstrom. Candidates will work closely with other engineers, principal consultants, and various client contacts such as stakeholders, architects, business analysts, client IT personnel, and management.
Duties
Work with a cross-functional team to secure client organizations from threats and vulnerabilities as part of a broader information security program
Analyze and troubleshoot complex problems and provide technical and software solutions using a diverse mix of cutting-edge technologies.
Perform research, present analysis, and provide recommendations about systems, vulnerabilities, security controls, and recommend improvements which are consistent with business goals.
Break down complex requirements into clear, actionable tasks which can be estimated and completed.
Develop, document, design, implement, and test security controls for clients in conjunction with senior engineers
Gather, compile, and synthesize information in regard to technology, threats, vulnerabilities, threat models, processes, hardware, software, and people.
Be capable of automating tasks using programming languages with well-documented, readable, and maintainable code
Must possess strong interpersonal and communications skills; capable of writing purchase justifications, training users/team members in complex topics, making/giving presentations.
Write policy, procedure, standards, guideline, and other technical documentation and about the proper implementation of sound security program elements
Able to review logs and other metrics for signs of cyber threats or attacks and escalate to senior engineers
Able to test complicated and detailed aspects of a security posture or configuration, identify deficiencies, and recommend remediation actions
Be capable of continually improving one’s own skill set relevant to business and technical missions with minimal oversight. Must take initiative, negotiate with project management, and execute successfully on plans.
Able to participate in agile team practices; reflect honestly on own performance, participate in shared team accountability, recommend changes for team improvement
Must be able to handle sensitive information with appropriate discretion
Write manual and automated tests as part of a normal security practice.
Other duties as assigned.
Work with a cross-functional team to secure client organizations from threats and vulnerabilities as part of a broader information security program
Analyze and troubleshoot complex problems and provide technical and software solutions using a diverse mix of cutting-edge technologies.
Perform research, present analysis, and provide recommendations about systems, vulnerabilities, security controls, and recommend improvements which are consistent with business goals.
Break down complex requirements into clear, actionable tasks which can be estimated and completed.
Develop, document, design, implement, and test security controls for clients in conjunction with senior engineers
Gather, compile, and synthesize information in regard to technology, threats, vulnerabilities, threat models, processes, hardware, software, and people.
Be capable of automating tasks using programming languages with well-documented, readable, and maintainable code
Must possess strong interpersonal and communications skills; capable of writing purchase justifications, training users/team members in complex topics, making/giving presentations.
Write policy, procedure, standards, guideline, and other technical documentation and about the proper implementation of sound security program elements
Able to review logs and other metrics for signs of cyber threats or attacks and escalate to senior engineers
Able to test complicated and detailed aspects of a security posture or configuration, identify deficiencies, and recommend remediation actions
Be capable of continually improving one’s own skill set relevant to business and technical missions with minimal oversight. Must take initiative, negotiate with project management, and execute successfully on plans.
Able to participate in agile team practices; reflect honestly on own performance, participate in shared team accountability, recommend changes for team improvement
Must be able to handle sensitive information with appropriate discretion
Write manual and automated tests as part of a normal security practice.
Other duties as assigned.
Requirements
Required Qualifications
Experience with Windows, Linux, macOS
Experience with Command-line programs, Shell and Shell scripting
Understanding of networking fundamentals, protocols & application behaviors as related to security matters
Experience with secure configuration, implementation of systems
A solid understanding of best practices and techniques in attacking or defending information systems
Self-motivated
Experience with Windows, Linux, macOS
Experience with Command-line programs, Shell and Shell scripting
Understanding of networking fundamentals, protocols & application behaviors as related to security matters
Experience with secure configuration, implementation of systems
A solid understanding of best practices and techniques in attacking or defending information systems
Self-motivated
Preferred Qualifications
Have experience with network and web application penetration testing and related tools (OSCP preferred)
Have familiarity with software development processes and experience securing custom software
Cloud experience (any of AWS, Azure, Google Cloud)
Have experience with network and web application penetration testing and related tools (OSCP preferred)
Have familiarity with software development processes and experience securing custom software
Cloud experience (any of AWS, Azure, Google Cloud)
Education
Bachelor’s Degree in Computer Science, Information Systems or related field; or certification in relevant programs (CISSP, CSSLP, OSCP, GPEN, GIAC, Security+, or others); or equivalent work experience.
Originally posted on Himalayas
Security Engineer
Premium Brands Opco LLC
About us
KnitWell Group, a specialty retail operating company, comprises some of the most iconic brands in America – Ann Taylor, Chico's, Haven Well Within, Lane Bryant, LOFT, Soma, Talbots, White House Black Market. Individually, our brands are unique and strong. Together, we are powerful.Our common thread is our commitment to create exceptional products, provide memorable experiences, and achieve superior results. Our associates are innovators who thrive through collaboration and are dedicated to excellence. At the heart of it all are the customers we serve. We are dedicated to creating fashion that not only looks good but also makes our customers feel good.About the role
The Security Engineer is a team leader that defines technical solutions to identified information security risks. Responsibilities include ensuring compliance with KnitWell’s corporate information security policies and enforcing implementation of KnitWell’s security architecture by using the Security Incident and Event Monitoring (SIEM) platform. This includes safeguarding the security of all computing platforms, data, and networking within the corporation, oversight of the security configuration, monitoring, and incident response.
The impact you can have
- Implement and configure security applications and infrastructure to support corporate policies, federal and state security regulations, specifically SIEM experience, with Splunk experience being a plus.
- Be an information security Subject Matter Expert, including familiarity with Cloud implementation.
- Design and conduct infrastructure security assessments at all layers of the information system including networking, servers, operating systems, databases and applications.
- Understand a secure network infrastructure including the design of network segmentation, firewall policies, and configuration of security devices.
- Perform security baseline discovery of current infrastructure and identify gaps between existing procedures, policy, and industry standards/best practices
- Participate in investigations of computer security incidents including incident response, containment of the incident and forensics.
- Understand information security best practices.
- Serve as a Team Lead on security projects.
- All other information security duties as assigned.
You’ll bring to the role
- Bachelor’s degree in Computer Science, Electrical & Computer Engineering or other related engineering discipline preferred, or equivalent work experience.
- 5+ years in information security, with emphasis on monitoring, incident response, and compliance.
- CISSP or GIAC certification desirable, other industry security certifications a plus.
- Risk Assessment experience; knowledge of IT risk management concepts such as risk assessment, risk identification, risk response and mitigation, risk monitoring and reporting etc.
- Experience in a PCI Compliance environment.
- Experience in Cloud computing.
- Hands-on experience in performing security assessments over complex networks, applications, and systems.
Benefits
· You will be eligible to receive a merchandise discount at select KnitWell Group brands, subject to each brand’s discount policies.
- Support for your individual development plus opportunities for career mobility within our family of brands.
- A culture of giving back – local volunteer opportunities, annual donation and volunteer match to eligible nonprofit organizations, and philanthropic activities to support our communities.*
· Medical, dental, vision insurance & 401(K).*
· Employee Assistance Program (EAP).
· Time off – paid time off & holidays.*
· The target salary range for this role is: $105,000 - $115,000
*Any job offer will consider factors such your qualifications, relevant experience, and skills. Eligibility of certain benefits and associate programs are subject to employment type and role.
- Remote: This position works remotely. Occasional travel to a company office may be required.
Applicants to this position must be authorized to work for any employer in the US without sponsorship. We are not providing sponsorship for this position.
Location:
Corporate ascena – RemotePosition Type:
Regular/Full timeEqual Employment Opportunity
The Company is an equal opportunity employer and welcomes applications from diverse candidates. Hiring decisions are based upon a candidate's qualifications as they relate to the requirements of the position under consideration and are made without regard to sex (including pregnancy), race, color, national origin, religion, age, disability, genetic information, military status, sexual orientation, gender identity, or any other category protected by applicable law. The Company is committed to providing reasonable accommodations for job applicants with disabilities. If you require an accommodation to perform the essential duties of the position you are seeking or to participate in the application process, please contact . The Company will make reasonable accommodations for otherwise qualified applicants or employees, unless such accommodations would impose an undue hardship on the operations of the Company’s business. The Company will not revoke or alter a job offer based on an applicant’s request for reasonable accommodation.
Originally posted on Himalayas