Senior Security Automation Engineer

Hi, I'm Juhi Banerjee, your Recruiter and guide to joining CSG! We are excited to learn more about you and your unique background.

The Senior Security Automation Engineer is responsible for supporting Information Security Automation & Testing team functions by creating, updating, and maintaining security automation projects and the supported programs.  This role will identify opportunities for improving efficiency and effectiveness of security teams through automation and work with teammates to implement those automation projects.  Additionally, this role will act as a consultant for the Security Automation & Testing team and other teams in the security organization to train team members on the opportunities associated with automation, how to consume the existing automation projects, and advise on standing up additional automation programs on different teams.  The Senior Security Automation Engineer must have expert-level knowledge of development and programming methodologies, process analysis, and project management.  Additionally, this role must have a broad understanding of IT fundamentals, including security, networking, and business and development processes.

We are looking for a Senior Security Automation Engineer who will:

• Implement, update, troubleshoot, and maintain moderately to significantly complex automation solutions
  • Identify opportunities for automation to create new or improve existing workflows and processes
  • Develop solutions leveraging third party APIs, third-party tools, or custom-developed processes
  • Participate in semi-formal code review process
  • Onboard teams to fully utilized developed solutions.  This may consist of training, documentation, FAQs, etc.
  • Provide ongoing operational support and enhancements for developed solutions
• Organize medium to large size development projects
  • Construct basic project plans based on requirements analysis
  • Communicate project status to leadership and management, including wins, impediments, and basic metrics
• Advocate automation solutions
  • Identify ways to improve within the security organization and across CSG’s organization
  • Promote automation best practices amongst the security team, including documentation and training around automated processes
  • Stay current in industry trends and technologies
• Provide training and mentorship of team members in process improvement, automation, and security testing, including:
  • Code reviews
  • Development-based mentoring and guidance
  • Educating team members in development and security testing practices
• Provide technical leadership for a vulnerability management program that includes: external and internal vulnerability scans of applications and systems, external and internal penetration tests of applications and systems, the documenting and remediating of identified vulnerabilities and exploits, routinely monitoring various communication avenues for security vulnerabilities and security patches, taking a risk based approach comparing those security vulnerabilities and security patches across the operating environment, and making recommendations to various IT teams on the mitigation process for those identified security vulnerabilities
• Support security operations incidents and response
  • Provide necessary support, including data analysis and automation
• Must be able to work outside normal business hours when needed to perform diagnosis and/or implementation of product releases or changes so that normal business workflow is not interrupted
• Incumbent is accountable for professional working behavior to include; building and maintaining constructive working relationships, implementing proactive and concise communication, acting as a resource to colleagues, and engaging in collaborative thinking and problem solving while demonstrating CSG’s core competencies and values.
• Understands and adheres to all applicable regulations, laws (including the Bank Secrecy Act), card association rules, CSG Security and Compliance standards as referenced in internal policies and procedures including Information Security, Acceptable Use, Code of Conduct, and other corporate policies. Keeps abreast of all applicable regulations, laws, and policies as they presently exist and as they change or are modified.

Is this opportunity right for you? We are looking for candidates who:

• Bachelor’s degree in: Computer Science, Management Information Systems, Information Security, related field, or equivalent experience
• Minimum 5 years working within information security, relevant information technology and/or DevOps roles