Sr Staff Security Engineer

Summary

Sr Staff Security Engineer

 

The Sr Staff Security Engineer will focus on the application of engineering principles to the design, implementation, and maintenance of security measures to protect an organization's information systems and data. These roles involve assessing vulnerabilities, developing security protocols, security monitoring and incident response, security development lifecycle activities, enterprise identity governance and administration, platform deployment and management and deploying technologies to safeguard against cyber threats, ensuring the integrity, confidentiality, and availability of information assets.

The Sr Staff Security Engineer plays a critical role in designing and implementing security solutions across the enterprise. This position is an advanced level role requiring an expert understanding of security engineering and software development practices to lead security initiatives, ensuring secure architecture for workloads, and implementing industry best practices.

 

The Sr Staff Security Engineer will collaborate with internal teams to protect the organization’s technology environments and respond to emerging threats, vulnerabilities, and compliance requirements. This role is highly collaborative and may include leading teams or mentoring more junior security engineers or external teams in key security concepts. This role will make important product and design decisions and provide technical and professional leadership for the team members who directly or indirectly report to them.

 

Job Will Remain Open Until Filled

Responsibilities

The Company is one of North America’s leading sales and marketing agencies specializing in outsourced sales, merchandising, category management, and marketing services to manufacturers, suppliers, and producers of food products and consumer packaged goods. The Company services a variety of trade channels including grocery, mass merchandise, specialty, convenience, drug, dollar, club, hardware, consumer electronics, and home centers. We bridge the gap between manufacturers and retailers, providing consumers access to the best products available in the marketplace today.

 

Responsibilities

• Demonstrates success leading medium-large-scale projects that potentially have an exceptional impact on the long-term growth of the company throughout the entire lifecycle: solution architecture, engineering design, development, testing, production, and subsequent fixes and improvements.
• Provides technical security guidance to IT leadership and makes wide-scale architectural and design decisions to ensure compliance with security policies, guidelines, standards, controls, and governance. Estimates, assesses, and manages project timelines, security risks, and supports escalated on-call requests. Represents security as a SME to advise teams on recommended best security practices and help identify security gaps.
• Reviews and designs mission critical security platforms to ensure code and requirements are clear, concise, tested, and easily understood by others as well as meets security standards, architectural principles, and NFRs.
• Support the Cyber Defense team by responding to security incidents, performing in-depth investigations and forensic analysis. Coordinate with other security teams, IT, HR, communications, and legal teams to address incidents.
• Mastered understanding of all components of key features and architecture for multiple products in the cybersecurity portfolio with a high-level understanding of several additional products, integrations, and capabilities.
• Continuous Improvement and Training--conducts technical research to contribute to setting security direction and strategy. Lead internal cybersecurity training initiatives for staff across the organization.

 

Supervisory Responsibilities

Direct Reports: This position does not have supervisory responsibilities for direct reports

Indirect Reports: Does not have direct reports, but may delegate work of others and provide guidance, direction and mentoring to indirect reports

 

Minimum Qualifications

Education Level:

Required: Bachelor's degree

 

Experience Requirements:

8+ years of experience supporting 4 of the following domains: Security and Risk Management; Asset Security; Security Architecture and Engineering; Communication & Network Security; Identity and Access Management; Security Assessment and Testing;

Cyber Defense (including computer forensics, cyber response, threat analysis & intelligence); Software Development Security.

Familiarity with at least 2 of the following frameworks: MITRE ATT&CK; MITRE D3FEND; NIST CSF; NIST RMF; ISO 27001; FISMA; COBIT; HITRUST

 

Environmental & Physical Requirements

Office / S