Senior Cyber Security Engineer, Cloud and CI/CD Pipeline Security

Senior Cyber Security Engineer, Cloud and CI/CD Pipeline Security

Overview

Reporting to the Head of Cybersecurity Engineering Services, the position will be responsible for the maintaining of and continuous improvement to Guardian’s security infrastructure. The individual will be challenged with working across a heterogeneous cross functional technology stack, delivering on key projects, performance enhancements, innovation, and responding to escalated security technology issues.

The Guardian Cyber Security Engineering team engineers, builds and owns a broad variety of cutting-edge security controls that fall in the domains of Network, Endpoint, Data, Identity, Cloud and Application security within the Secure CI/CD Pipeline and are deployed within SAAS, PAAS, Private and Public IAAS environments. The Team is also responsible for ensuring efficiency, effectiveness, and resiliency of the said controls.

The team assesses and prioritizes the modernization and effectiveness of Guardian’s cyber security technology. The Security Engineering team partners with other Guardian cyber security and technology service teams & suppliers to build effective protective/detective controls, ensure their efficient and highly available operations, designs Security Monitoring and Response Use Cases with the goal to create robust countermeasures.

The selected team member will follow a Secure DevOps methodology to support infrastructure as code that aligns with Guardian’s strategy to shift-left and be proactive in remediating potential misconfigurations and vulnerabilities within the Company’s CI/CD pipelines.

You Are:

• A seasoned and experienced engineer who can translate mission, objectives, and goals into well-sequenced technical activities and who strives to get technology operating efficiently, reliably, by requiring the minimum of human intervention.
• Someone who thrives to partner & collaborate across the Company to deliver outstanding service to our internal business and technology colleagues by endorsing and promoting the Company’s values, goals, and success factors.

You Will:

• Design, implement, operationalize, and maintain cutting-edge Cloud, Pipeline and Application security technologies on-premises and in the Cloud.
• Perform risk and compliance self-assessments; identify, document, and remediate risks associated with defects in the current implementation or limitations of the above security controls.
• Conduct vendor and product feature assessments and proof of concepts to help Guardian maintain the best-in-class cyber security technology portfolio. Partner with other technology teams to define and implement Guardian cyber security strategy.
• Design and operationalize, through code development, the automated workflows for response to operational issues and for deployment of configuration changes.
• Partner with other technology teams to enhance Guardian CI/CD Pipeline with additional security controls and to broaden the self-service capabilities of Guardian Cloud environment.
• Resolve escalated service issues and coach other engineers on troubleshooting efforts.
• Partner with other technology teams in handling and responding to internal customer issues, conducting problem analysis, providing solutions for service level improvements, and ensuring timely remediation of security issues in accordance with corporate policies and standards.
• Provide advisory consulting services on the topics of cloud, pipeline and application security to the leadership, partner teams, internal customers; work with Company suppliers on product enhancements.
• Enhance existing and develop new processes, procedures, and baselines with respect to cyber security and the use and operation of information systems.
• Support internal and external audit and compliance reviews, lead the team on gathering requirements and evidence, and provide timely responses.
• Drive initiatives to grow the cyber security mindset and best practices across the Company, with an emphasis on gaining measurable results

You Have:

• Intellectual curiosity and proven record of spotting anomalies and inconsistencies and identifying creative solutions to resolve security control deficiencies and to optimize performance.
• Strong analytical, critical thinking, and problem-solving skills, to assess the level of risk and potential impact of sub-optimal implementation of security controls to mitigate new cyber threats and reduce attack surfaces to the enterprise.
• Understanding of configuration best practices and performance baselines.
• 5+ years of experience with implementing and operating Cloud Security controls in the domains of Network, Endpoint, Data, and Identity Security.
• Knowledge of CI/CD pipeline components and