Security Engineer

Exterro is seeking a Security Engineer to join our Information Security department. This position is responsible for assessing Exterro’s and associated business lines security posture by identifying and analyzing potential threats and vulnerabilities to our systems and applications. This position is responsible for securing the software footprint and the company business. This role will have opportunities to keep up with current and emerging threats in the industry and latest bleeding edge tech to identify gaps or areas to improve upon in cyber security. 

Responsibilities:

• Collaborate with Engineering, Product, Customer Support, and other departments to support customer security requirements
• Advise engineering teams on possible threat vectors and security best practices
• Conduct threat modeling, security design reviews, and support engineering teams in the identification of application security risks 
• Responsible for promoting, designing, and evaluating application security in all phases of the software development life cycle, and constantly looking for innovative ways to improve processes 
• Develop and implement appropriate and effective controls to mitigate security risks 
• Evaluate and investigate security alerts and logs; perform security investigations and analysis 
• Research and evaluate network security tools such as SEIM, IDS/IPS, DDoS prevention, etc. 
• Perform security reviews of applications and source code, policies, and systems 
• Perform vulnerability and penetration testing on Exterro’s cloud infrastructure and our Exterro Suite 
• Develop internal security guidelines and policy instructions 
• Provide detailed security review reports to engineering and other stakeholders

Requirements:

• Bachelor’s or Master’s degree in computer science or related field or equivalent work experience
• 5+ years of experience in Information Security
• Familiarity with SAST, DAST, SCA and manual testing application security tools
• Strong organization, time management and project management skills
• Experience in public cloud environments
• An understanding of system hardening, containerization, and cloud security controls
• Familiarity with OWASP ASVS and similar frameworks
• Provisioning package development and management
• Excellent interpersonal skills and communication skills; you should be an ambitious teammate with strong analytical, problem-solving, debugging and troubleshooting skills

Candidate would ideally possess experience with the following:

• AWS expertise 
• Familiarity with security tooling (SEIM, IDS/IPS, Vulnerability Scanners)
• CSSLP, CCSP, CRISC, or similar certification
• Security experience on SaaS, IaaS, and/or PaaS cloud solutions is highly desirable

Please apply directly on our career's page https://www.exterro.com/about/careers/

Exterro is an equal opportunity employer, participates in E-Verify and is a drug-free workplace. All employment offers are contingent upon the successful passing of a background check.

We believe in the importance of pay transparency and strive to create a fair and equitable workplace for all employees. As a remote first organization, our compensation reflects the cost of labor across several US geographic markets. The salary range for this remote position is $104,000-$145,000 per year, based on skills, experience and qualifications. The actual offer will be based on the individual candidate. Exterro is a total compensation company, and this role may be eligible for variable pay, equity, bonus and/or other forms of compensation as part of the package. In addition, we offer a comprehensive benefits package that includes health insurance, retirement plans, flexible paid time off and more.

<