Principal Cybersecurity Engineer

Discover. A brighter future.

With us, you’ll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it — we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine.

Come build your future, while being the reason millions of people find a brighter financial future with Discover.

Job Description:

At Discover, be part of a culture where diversity, teamwork and collaboration reign. Join a company that is just as employee-focused as it is on its customers and is consistently awarded for both. We’re all about people, and our employees are why Discover is a great place to work. Be the reason we help millions of consumers build a brighter financial future and achieve yours along the way with a rewarding career.

The Principal Cybersecurity Engineer designs the Cybersecurity engineering roadmap, and delivers highly complex secure systems, cyber applications, technical projects and regulatory and risk requirements. This role drives Cybersecurity engineering solutions, framework, roadmap, program optimization, process engineering, risk remediation, and mitigation of operational risk in a high velocity culture. Analyzing cyber technologies, metrics models, and performance indicators are key activities this role performs on the road to identifying robust solutions and building resilient next-generation systems that solve business challenges and enhance the control environment. Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management.

Discover's Security Automation Team is seeking a talented, self-motivated Principal Cybersecurity Engineer to drive our Security Orchestration Automation and Response (SOAR) development lifecycle. Our team serves as champions for automation throughout Discover's Cybersecurity organization by designing, developing, and deploying impactful automation solutions to keep our security teams focused on solving their most challenging problems.

If you're interested in enabling groups such as our Security Operations & Incident Response teams by creating elegant automation solutions, while also helping to develop and mentor more junior team members, you would be a great fit for this role.

Responsibilities

• Acts as the principal advisor to upper management in Cybersecurity matters.
• Ensures security improvement designs are evaluated, validated, and implemented as required.
• Explores and assesses the latest technology trends, disruptions and security/IT service business models to ensure Business Technology maintains, and improves, organization cyber competitive edge.
• Works closely with management to define and promote the strategic direction of the team.
• Provides strong leadership and direction to team members. Provides subject matter expertise across all Cybersecurity technologies.
• Ability to navigate and adapt to a fast-paced ever-changing environment with a team of like-minded, cross-functional individuals.
• Creates and maintains Cybersecurity technology roadmap. Ensures compliance to audit, regulatory and legal requirements. Makes recommendations that enable expeditious remediation.
• Process mapping automated workflows using the business process mapping and notation (BPMN) process.
• Design, implement, standardize, and maintain efficient and reusable Python code or other programming language.
• Write, test, and maintain automation scripts and or workflows within SOAR platform.
• Review, test, debug, and resolve technical issues throughout all stages of Software Development Life Cycle.
• Participate in design reviews, code reviews, and pair programming sessions.

Minimum Qualifications

At a minimum, here’s what we need from you:

• Bachelors – Computer Science or related
• 6+ years – Information Security, Application Security, Security Engineering or related
• Internal applicants only: technical proficiency rating of proficient on the Dreyfus engineering

Preferred Qualifications

Bonus Points If You Have:

• 3+ years of experience developing with Python

• Prior security and or IT consulting experience

• 2+ years of experience with container services (Docker, Kubernetes, etc.)

• 5+ years Linux administration experience

• 2 + years Cloud infrastructure experience (AWS, Google, or Azure)

• Experience using Agile methodologies

• 2 + years of experience in API development/consumption

• Proficient in the following cyber security platforms: SOAR, SIEM, IDS/IPS, DLP, WAF,