Security Engineer

The Company:

Marigold helps brands foster customer relationships through the science and art of connection. Marigold Relationship Marketing is a suite of world-class martech solutions that help marketers create long term customer love and loyalty. Marigold provides the most comprehensive set of use cases for marketers at any level. Headquartered in Nashville, Tennessee, Marigold has offices globally across the United States, Europe, Australia, New Zealand, South America and Central America, as well as in Japan.
 

The Role:
 

At Marigold we are committed to accommodating the email marketing needs of growing companies, which is the philosophy behind our continuous additions of innovative marketing technologies. We have an opportunity for a Security Engineer to join our global Enterprise Security Team, helping Marigold to realize its mission by addressing key security and compliance challenges in our global Security Program, and to build trust with customers and prospects.

We are looking for a talented and motivated individual who is looking to take the next step in their information security career as an individual contributor working alongside a talented and knowledgeable team to manage existing security controls, plan and build new solutions, and help to improve our overall security posture.The ideal candidate will have strong communication skills, direct experience as an individual contributor within a SOC or as an entry level security engineer, working knowledge of current security related technologies and concepts, and familiarity with broader information security concepts.

You will join the team as a strong contributor whose primary focus is supporting Marigold’s global security posture through management of existing defensive and detective controls and participation in security related project activities. The breadth of our remit offers opportunities to engage in other information security related areas according to your own level of curiosity and interest and as time allows. Lastly, we encourage active participation in team meetings, lending your voice and experience to enrich our collective knowledge; we learn together to improve together.

This role will report to the Senior Manager, Enterprise Security.

Key Responsibilities:

• Handle day-to-day implementation, monitoring and operational support of security related hardware, software, managed solutions, and service provider relationships.

• Actively participate in projects to improve security posture, availability, and/or performance.

• Actively participate in security team meetings.

• Represent Marigold Information Security interests in project planning and change management meetings.

• Participate in on-call for security incident response and system stability issues. This may include occasional involvement outside of regular work hours, and responsiveness is expected.

• Respond to and handle service and escalation tickets within SLA expectations.

• Research, validate and deploy solutions meeting security and business needs.

• Participate in regulatory compliance response; perform and document user and control reviews, collect samples, and assist the Security GRC team as needed.

• Stay current with the evolving threat landscape and look for potential applicability of emerging threats to Marigold assets and systems.

• Perform other duties as assigned.

Qualifications:
 

• 2+ years’ direct experience in endpoint, infrastructure, or other security engineering or SOC analyst, vulnerability analyst, or other security operations related activity required
   

Prerequisite Knowledge:

• Working knowledge of the following topics:

  • Security engineering concepts: endpoint protection, network security architecture, network security controls (WAF, DDoS, FW, IDS/IPS, honeypots, etc.), SecureDNS.

  • Identity and access management concepts: authentication vs. authorization, MFA, access control, least privilege

  • WIndows, OSX functionality, logging, and administration
     

• Familiarity with the following topics:

  • Basic cryptography concepts: symmetric vs. asymmetric cryptography, PKI, certificates, key management, etc. 

  • Incident response concepts: triage, kill chain, postmortems, etc.

  • Public cloud service providers (AWS, GCP, Azure)

  • Linux functionality, logging, and administration
     

Strong Behaviors:

• Be curious. Seek to understand “why” behind the actions. 

• Act with integrity. Be trustworthy, and trust your team. Ethical behavior is the baseline.

• Demonstrate critical thinking through an analytica