Sr. Security Engineer

C.H Robinson is seeking a talented Senior Information Security Engineer to join our team. In this role, you will serve as an expert in areas relating to information security services, technology, and application. You will advise management and peers on technical issues concerning the security of system applications, data, and data networks, while providing advice to divisions and customers on security operations to enhance distributed processing across different systems and hardware platforms. As a Senior Information Security Engineer, you will serve as a designer and systems integrator for large complex applications, systems, and networks, with a focus on securing vulnerabilities and reducing risk of system and asset compromises.

C.H. Robinson solves logistics problems for companies across the globe and across industries, from the simple to the most complex. With $28 billion in freight under management and 2.5X larger than the next largest North American freight broker, we are one of the world’s largest logistics platforms with our 100,00 customers and 85,000 contract carriers. Our global suite of services accelerates trade to seamlessly deliver the products and goods that drive the world’s economy. Our technology is built by and for supply chain experts to bring faster, more meaningful improvements to our customers’ businesses. Apply today and contribute to shaping the future of technology at C.H. Robinson.

Responsibilities

The duties and responsibilities of this position consists of, but are not limited to, the following: 

• Design, implement, and maintain both on-premise and cloud-based information system security controls and countermeasures, documenting their operation and expected outcomes

• Analyze and recommend security controls and procedures throughout the acquisition, development, and change management lifecycle of information systems, ensuring compliance
• Administer authentication and access controls, conduct regular reviews of exception reports, and take appropriate actions to uphold system integrity
• Monitor information systems for security incidents and vulnerabilities, reporting findings and trends, and responding to incidents, including investigation and recovery
• Collaborate with senior security engineers and stakeholders to maintain strategic roadmaps for the Information Security program, analyzing threat and compliance environments, and executing plans for risk mitigation
• Develop and implement information security governance, including policies, procedures, standards, and guidelines, while also overseeing training and awareness programs
• Maintain expertise through individual development plans and mentorship, while also advocating for C.H. Robinson's security controls and program
• Provide support and documentation for vendor relationships
• Other duties and responsibilities

Required Qualifications:

• 5+ years of Technology experience 
• 3+ years of information security/network  experience 
• Demonstrated experience and progressive track record of technical achievement and a strong focus toward customer service and satisfaction 
• Strong Active Directory, Linux, and Windows client/server experience 
• Security technologies and implementation of security products (firewalls, AV systems, IDS, IPS, web content filter, Microsoft Windows system security services and functions) 
• Working knowledge of public cloud workloads and SaaS systems 
• Previous experience with identity and access management (MFA, identity lifecycle) 
• Understanding of best practices in security engineering, including secure development, cryptography, network security, security operations, systems security, policy, and/or incident response 
• Bachelor's Degree in Computer Science or minimum of 4 years of equivalent work experience and high school diploma/GED

Preferred Qualifications:

• Experience securing cloud workloads and SaaS systems 
• Securing public cloud workloads 
• Working knowledge and previous experience with forensic investigations 
• Working knowledge of PKI and certificate management 
• Experience with two factor authentication methods and technologies 
• Previous experience establishing and utilizing measurements, processes, and metrics to manage support activities 
• Experience with encryption technologies and methods 
• Previous experience with vendor management and coordinating vendor activities. 
• Knowledge of wireless technology and portable device security  
• Ability to perform technical analysis of complex software, systems, hardware, and network environments 
• CISSP, Cisco, Microsoft, or security certifications 
• Values a diverse and inclusive