Security Engineer - GDX

Costco IT is responsible for the technical future of Costco Wholesale, the third largest retailer in the world with wholesale operations in fourteen countries. Despite our size and explosive international expansion, we continue to provide a family, employee centric atmosphere in which our employees thrive and succeed.

This is an environment unlike anything in the high-tech world and the secret of Costco’s success is its culture. The value Costco puts on its employees is well documented in articles from a variety of publishers including Bloomberg and Forbes. Our employees and our members come FIRST.  Costco is well known for its generosity and community service and has won many awards for its philanthropy. The company joins with its employees to take an active role in volunteering by sponsoring many opportunities to help others. 

Come join the Costco Wholesale IT family. Costco IT is a dynamic, fast-paced environment, working through exciting transformation efforts. We are building the next generation retail environment where you will be surrounded by dedicated and highly professional employees.

Security Engineers develop, design, implement, and integrate security systems used to safeguard enterprise assets against cyber-attack. Security Engineers drive innovation, influence delivery, and maximize performance. They deliver high-quality artifacts, develop and run security tests and continuously tune security tools for optimization. Security Engineers identify gaps and inefficiencies and work with the business to implement solutions based on their requirements.

As part of the Digital Site Security team the DevOps Security Engineer will be focused on improving the security posture and delivery of new and enhanced security capabilities for Costco BC and BD properties.

If you want to be a part of one of the worldwide BEST companies “to work for”, simply apply and let your career be reimagined.

ROLE

●      Provides security and technical expertise to create, implement, and support the development of security objects—including Fastly CDN configurations, custom VCL logic, and Terraform-managed resources—to satisfy business requirements.

●      Analyzes, builds, operates, and administers security policies to control physical and virtual system access and configurations, including on Fastly edge computing and cloud platforms.

●      Identifies and investigates security issues, leveraging multiple dashboards, alerting, and configuration management, to develop security solutions that address compliance requirements and mitigate risks.

●      Identifies, develops, and implements mechanisms (such as Fastly security features, custom VCL, and automated Terraform deployments) to detect security incidents in order to enhance compliance and support security standards and procedures.

●      Assesses business role requirements, reviews authorization roles, and supports authorizations, including integration with edge security platforms.

●      Demonstrates a comprehensive skill set with testing authorizations for multiple environments (on-premises, cloud, and edge); coordinates and conducts testing with business/technical users.

●      Defines and validates system configurations—using tools such as automated Terraform checks—to ensure the safety of information system assets and protect information from intentional or inadvertent access or destruction.

●