Information Security Senior Engineer

QUALIFICATIONS:

• Strategic Oversight:
  • Design and implement a comprehensive application security strategy aligned with organizational goals and industry standards (e.g., NIST CSF, NIST 800-53, CSA CCM).
  • Lead the evaluation and adoption of cutting-edge security tools and methodologies to address emerging threats (e.g., AI-driven attacks, supply chain vulnerabilities).
• Technical Leadership:
  • Be a technical subject matter expert (SME) responsible for Azure, AWS, GCP, Oracle, OpenShift, container, and general cloud security capabilities such as identity & access, data protection, security controls and compliance, vulnerability management, threat detection and response, and logging/monitoring.
  • Deploy, configure, and maintain cloud & container security tools and technologies to monitor, detect, and prevent data leakage or unauthorized data transfers.
  • Design and build automations and playbooks to assist with and improve the efficiency of response to detections from relevant technical tools.
  • Conduct regular assessments to identify gaps in cloud and container security controls, processes, and systems and propose security enhancements to mitigate risks.
  • Develop cloud and container security policies and technologies to address data leakage.
  • Conduct RFP’s, assess, and evaluate cloud/container security tools for utilization within the organization.
  • Collaborate with technology and application owners for onboarding of cloud/container technologies to enhance the SSDLC (Secure Software Development Life Cycle)
  • Collaborate with the CSIRT (Computer Security Incident Response Team) and Security Engineering team to expand and mature detections.
  • Collaborate within the SOC and across IT to mature SOC playbooks, alerting, processes, and Incident Response actions.
  • Lead and facilitate the creation of compliance automation and policy-as-code to streamline cloud governance in partnership with technology and application owners.
• Collaboration and Mentorship:
  • Partner with engineering, Cloud teams, DevOps, and product teams to embed security into all phases of cloud implementation, advocating for security culture.
  • Collaborate with technology and application owners to establish and agree upon secure deployment standards.
  • Mentor and train junior security engineers and developers on secure cloud practices, threat modeling, and vulnerability remediation.
• Incident Management:
  • Support incident response efforts for cloud-related security incidents, coordinating with cross-functional teams to contain, analyze, and resolve incidents.
  • Develop post-incident reports and recommend long-term preventive measures to senior leadership.
• Compliance and Governance:
  • Ensure applications comply with regulatory requirements (e.g., CMMC, GDPR, SOC, PCI-DSS) and prepare for audits by maintaining robust documentation.
  • Establish and enforce application security policies, standards, and KPIs to measure program effectiveness.
• Research and Innovation:
  • Stay ahead of evolving threats by researching new attack vectors (e.g., zero-day exploits, API vulnerabilities) and proactively updating security controls.
  • Represent the organization in industry forums, contributing to thought leadership on application security trends.

The well-being of WWT employees is essential. So, when it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:

• Health and Wellbeing: Health, Dental, and Vision Care, Onsite Health Centers, Employee Assistance Program, Wellness program
• Financial Benefits: Competitive pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Tuition Reimbursement
• Paid Time Off: PTO & Holidays, Parental Leave, Sick Leave, Military Leave, Bereavement
• Additional Perks: Nursing Mothers Benefits, Voluntary Legal, Pet Insurance, Employee Discount Program

World Wide Technology is an Equal Opportunity Employer. We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication. Our goal is to cultivate a culture of belonging that encourages innovation, collaboration, and respect for all team members