Security Engineer/Sr. Security Engineer

What part will you play? If you’re looking for a place where you can make a meaningful difference, you’ve found it. The work we do at Markel gives people the confidence to move forward and seize opportunities, and you’ll find your fit amongst our global community of optimists and problem-solvers. We’re always pushing each other to go further because we believe that when we realize our potential, we can help others reach theirs. 

Join us and play your part in something special!

The role of the Senior Security Engineer is responsible for designing and implementing the best strategies to protect the internal network from unauthorized access. Senior Security Engineers need to know security analysis and design. This role must understand how to design architecture that protects the company, and work with other security specialists to help mitigate damages during current attacks. Senior Security Engineers are responsible for identifying any hardware or software issues that could be a future vulnerability, and work with managers to help change the architecture. It is critical to understand different hardware and software technologies, and use the Enterprise Security Framework to drive appropriate design and provide recommendations.

Title  

Security Engineer / Senior Security Engineer– Cyber Technology Engineering

Job Summary

A Senior Security Engineer at Markel has a wide range of responsibilities to secure the enterprise environment and reduce enterprise risk.  This role's primary responsibility is to provide operational support, documentation and maintenance of a variety of security tools and infrastructure, with a focus on Microsoft 365 & Cloud Security.  This role will act as a technical resource for policy development, secure architecture, regulatory and industry requirements, enterprise projects and other Markel initiatives. This position is part of the Cyber Technology Engineering team within the Global Security Services (GSS) division of Markel.

Job Responsibilities

• Responsible for secure configuration of cloud-based collaboration and productivity tool suites.
• Oversee changes to the cloud environment and deployment of software to ensure protection.
• Subject matter expert on applying the corporate security framework to cloud application design to support secure implementation.
• Develop appropriate cloud security architecture to be implemented in support of business and security initiatives, and compliance requirements.
• Produce or assist in creation of metrics to report on the state of Cloud Security that is shared with multiple levels of the business.
• Ensure secure processes for authentication, authorization, and encryption with a deep understanding of API integrations conditional access, MFA and zero trust methodology for cloud solutions.
• Responsible for secure configuration of mobile technology solutions, including secure access solutions.
• Create and maintain environments for the Global Security Services team to test security solutions, settings, and designs.
• Create new ways to ensure appropriate levels of security and risk mitigation exists throughout the organization on premise and cloud environments.
• Write and implement automation scripts for a variety of security needs.
• Project support from evaluation to implementation of new and emerging security products and technologies.
• Serve as a technical resource for other departments within the Global Security Services division.
• Provide operational support and maintenance for various security tools to include vulnerability management, endpoint detection and response, SIEM, and other technologies as required. 
• Participate in various run the engine processes such as firewall change approvals, software risk reviews, email security policy modifications, etc.
• Keep current with the latest security policies, news and events surrounding cyber threats and security and apply to experience to protect the network.
• Keep all technical skills up to date and share information learned about data protection to peers.
• Work with Manager to provide guidance, instruction mentoring and leadership to junior team members for purposes of achieving functional goals and objectives.
• Effectively communicate complex security problems and recommended solutions to an audience with varying levels of security and technical knowledge.
• Document and define corporate security policies, standards, and procedures.
• Develop documentation and diagrams to support ongoing security systems operations, maintenance, and problem resolution.
• Interpret and establish recommendations on controls to meet compliance and regulatory requirements for NY State/PCI/GDPR/NIST/etc.
• Ot