Sr. IT Security Engineer

Curaleaf Holdings, Inc. (CSE: CURA) (OTCQX: CURLF) ("Curaleaf") is a leading international provider of consumer products in cannabis with a mission to enhance lives by cultivating, sharing and celebrating the power of the plant. As a high-growth cannabis company known for quality, expertise and reliability, the Company and its brands, including Curaleaf, Select, and Grassroots provide industry-leading service, product selection and accessibility across the medical and adult-use markets. In the United States, Curaleaf currently operates in 19 states with 150 dispensaries and employs nearly 5,500 team members. Curaleaf International is the largest vertically integrated cannabis company in Europe with a unique supply and distribution network throughout the European market, bringing together pioneering science and research with cutting-edge cultivation, extraction and production.   Home | Curaleaf | Cannabis with Confidence

Our corporate social responsibility is Rooted in Good. We believe in taking corporate and social responsibility very seriously, from our educational outreach to national partnerships, state-wide initiatives and local causes. Giving back to the communities where we operate is important to us and helps to change old attitudes by showing the positive impact of cannabis in creating jobs, changing lives, and helping local communities. Social Responsibility | Curaleaf | Cannabis with Confidence

 

Our Mission: To enhance lives by cultivating, sharing, and celebrating the power of the plant. 

Our Vision: To be the world's leading cannabis company by consistently delivering superior products and services and driving the global acceptance of cannabis. 

Our Values:

• Lead and Inspire.  
• Commit to Win.  
• ONE Curaleaf.  
• Driven to Deliver Excellence.  

 

Curaleaf Culture: 

At Curaleaf, we have a passionate commitment in everything we do. From innovative products to promoting social justice, from environmental sustainability to building world-class brands, we know that none of this is possible without our Team Members, which is why we’ve committed to fostering a diverse and inclusive experience for all. 

What You’ll Do:

The Security Engineer is a member of the IT security operations team and works closely with the other members of the IT security team in support of a comprehensive IT security program. This role is an experienced-level engineer that is responsible for monitoring various IT security appliances to identify events that require escalated analysis, address tickets and review suspicious activity. The Security Engineer reports to the Director of Information Technology Security for Curaleaf.

Duties include planning and implementing security measures and policies to protect computer systems, networks and data. The security engineer is expected to stay up-to-date on the latest intelligence, including hackers’ methodologies, to anticipate security breaches. The Security Engineer is responsible for researching new technologies that will effectively protect a network. This position also is responsible for helping to analyze manage and follow-up on security incidents.

The Security Engineer will have experience in executing the full compliment of Information Security solution identification and implementation from requirements definition, to architecture, design, implementation, and test through deployment and operations and support

 

What You’ll Bring:

Perform the necessary efforts to analyze, assess, evaluate, integrate, improve, implement, test, sustain, and maintain the system IT security posture and capabilities.

• Review and address security tickets such as phishing reports, scanning requests, malware reports, etc.
• Perform all necessary IT domain activities to ensure the system baselines follow the respective network domain mandated standards, and authorization to connect requirements.
• Develop and document security design artifacts and the associated security controls that are meeting the security acceptance criteria.
• Assist with risk assessments.
• Assist with security test evaluations and audits.
• Analyze and contribute to security requirements for information protection for enterprise systems and networks.
• Assist in the development of security policies.
• Analyze the sensitivity of information and perform vulnerability and risk assessments based on defined sensitivity and information flow.
• Assess security risk, research and recommend countermeasures in accordance with Curaleaf requirements, conduct formal security assessments a