Senior Information Security Engineer

What You Need To Know

 

Open the door to a groundbreaking tech career with an industry leader. Southern Glazer’s Wine & Spirits is North America’s preeminent wine and spirits distributor, as well as a family-owned, privately held company with a 50+ year legacy of success. To create a new era in alcohol beverage sales and service, we’re heavily invested in the most transformative new technologies – and the most brilliant tech professionals. Southern Glazer’s was named by Newsweek as a Most Loved Workplace and is included on the Forbes lists for Largest Private Companies and Best Employers for Diversity.

 

As a full-time employee, you can choose from a full menu of our Top Shelf Benefits, including comprehensive medical and prescription drug coverage, dental and vision plans, tax-saving Flexible Spending Accounts, disability coverage, life insurance plans, and a 401(k) plan. We also offer tuition reimbursement, a wellness program, parental leave, vacation accrual, paid sick leave, and more.

 

We offer continuous learning and career growth in a fast-paced environment where you are respected, your voice is heard, and technology is part of our strategy for success. If you’re looking to fill your glass with opportunity, come join our FAMILY.

Overview

 

The Senior Information Security Engineer is responsible for assisting with evaluating, implementing, maintaining, and assessing security solutions and infrastructure. Responsibilities involve conducting threat modeling, pinpointing process inefficiencies, and collaborating with both internal and external teams to resolve challenges identified through incident response, assessments, and penetration testing. Coordinate operational and support activities for enterprise-wide security issues encompassing resource allocation and the management of problems and solutions. Communication skills are a must for this position.

Specialized Skills and Technologies

 

• Excellent teaching, problem-solving, communication, and interpersonal skills
• A solid understanding of networking, systems, and security related technologies
• Able to build and maintain relationships, provide mentorship, and present ideas in an effective manner
• Basic knowledge of scripting languages – Python, PowerShell, Bash, etc.
• Proven experience responding to incidents in an Enterprise environment
• Experience managing endpoint security in an Enterprise environment
• Practical experience working with SIEM solutions in an Enterprise environment
• Working experience in Linux, Windows, and MacOS is a plus
• Strong understanding of eDiscovery and Forensic processes used in Incident Response
• Strong foundation in performing Incident Response
• Able to analyze and respond to threat intelligence data
• Knowledge of common attack techniques and tactics used by threat actors
• Strong communication and decision-making skills
• Strong ability to influence others
• Proven ability to analyze and solve problems with excellent attention to detail
• Strong team player who can work across multiple functions and disciplines

Primary Responsibilities

 

• Evaluates and implements security technologies to fortify organizational defenses and enhance overall security posture
• Directs and participates in information security projects and supports team efforts for day-to-day operations
• Assists in the investigation of security-related events
• Assists with computer forensic and eDiscovery requests as needed
• Assists with follow-up on alerts received from user-reported email and security tools
• Manages and monitors the EDR solution and responds to threats in the environment
• Performs proactive and continuous threat hunting activities to detect and mitigate potential security threats with a focus on maintaining a robust security posture
• Designs comprehensive incident response playbooks ensuring well-structured and effective responses to security incidents
• Serves as a member of the team and as a mentor to other information security team members as needed
• Assesses the current information security program and makes recommendations regarding improvements
• Aggressively automates repeated tasks to allow the team to scale with the organization’s growth
• Serves as a member of the team in a technical role
• Serves as a subject matter expert inside of SGWS and assists with complex issues pertaining to Information Security as needed
• Participates in on-call rotation

Preferred Qualifications

 

• Certified Information Systems Security Professional (CISSP)
• GIAC or Offensive Security Certifications – GPEN, GCIH, GREM, OSCP, etc.