Senior Security Operations Engineer (Azure)

At Jamf, we believe in an open, flexible culture based on respect and trust. Our track record and thriving work environment all stem from the freedom we grant ourselves to get the job done right. We take pride in helping tens of thousands of customers around the globe succeed with Apple.

The secret to our success lies in our connectivity, while operating with a high degree of flexibility. Work-life balance remains our priority while feeling connected is important to maintain our strong culture, achieve our goals, and thrive as #OneJamf.

 

What you'll do at Jamf:

The Senior Security Operations Engineer will work with the Cloud and Delivery team to continue to build, automate and maintain cloud security services in Azure. They will be responsible for leading the Security Design and Architecture, Log Collection, Security Incident Management, Identity and Access Management, Vulnerability and Patch management. They will be responsible for maintaining operation of the environment in accordance with our service level agreements and providing support to both our staff and customers.

 

What you can expect to do in this role:

• Mentors and advises others in related components and broad fundamental expertise areas
• Manages identity and access control in Azure
• Responsible for the tools, configuration, administration and related processes around our log file collection and monitoring
• Provides the framework, processes and execution to ensure support of Jamfs data leakage prevention
• Responsible for Web application firewall and related prevention, detection and mitigation of DDoS attack
• Vulnerability Management: Accountable for the prevention, detection and mitigation of vulnerabilities through industry standard tools, configuration, administration and internal procedures
• Performs regular firewall audits in line with our procedures. Provides the appropriate documentation, supporting evidence and follow up on identified issues requiring remediation
• Responsible for tooling, processes and follow up actions related to our external port scanning needs and practices
• Handles the identification, planning and implementation of any server hardening needs. Works collaboratively with Operations and other internal teams to communicate, document and implement
• Performs security incident analysis, response and remediation
• Participates in design and implementation of security automation workflows
• Helps manage security data reporting and visualization platform
• #LIRemote

 

What we are looking for:

• Minimum of 4 years IT security principles, security operations, techniques, and technologies. (Required)
• Minimum of 4 years experience working with Linux/Unix command line interfaces, including Shell or Python scripting (Required)
• Minimum of 4 years experience with industry standard configuration management and deployment tools (e.g. Ansible, Azure Resource Manager or other) (Required)
• Minimum of 2 years experience administering some or all of the following Azure Services: (Virtual Machines, SQL Database, Load Balancer, Storage) (Preferred)
• Minimum of 2 years experience working with monitoring (Logic Monitor, AppDynamics, Zabbix, etc) and logging tools (Splunk, Sumologic, or ELK (ElasticSearch/Logstash/Kibana)) (Preferred)
• Advanced knowledge of containerization concepts and Kubernetes (Preferred)
• Basic knowledge of MySQL or Postgres (Preferred)
• 4 year / Bachelor's Degree (Preferred)
• A combination of relevant experience and education may be considered
• The following certification is preferred: Microsoft Certified: Azure Security Engineer Associate

 

OTHER REQUIREMENTS: 

This position will perform work that the U.S. government has specified can only be performed by a U.S. citizen located physically in the U.S., and therefore any employment offer will be contingent upon verification of both of these requirements. Applicants who are not U.S. citizens or who are located outside of the U.S. are strongly encouraged to apply for other positions at Jamf, which is an equal-opportunity employer.

 

SECURITY AND PRIVACY REQUIREMENTS:

• Participation in ongoing security training is mandatory
• Established security protocols will be adhered to, sensitive data will be handled responsibly, and data protection practices are followed, including understanding relevant privacy regulations and reporting breaches
• Acknowledging the Jamf Code of Conduct, where applicable security and privacy policies can be found, is a requirement of all roles at Jamf

 

 

How we help you reach your best potential: