Senior Security Engineer

Creates testing tools to help engineering teams identify security-related weaknesses. Recognizes and escalates complex security violations to senior team members. Contributes to compliance assessments to identify gaps and ensure compliance with internal and external obligations. Provides security best judgment and recommends best practices of data security using various tools and techniques such as encryption, hashing, masking, and access management to ensure the confidentiality and integrity of sensitive information.

Responsibilities

Key Responsibilities
Security Monitoring - Security Tool Design and Development:
-Plans and performs in-depth security assessments across a variety of products and services to identify potential vulnerabilities.
-Creates testing tools to help engineering teams identify security-related weaknesses.
-Conducts security design and provides recommendations and guidance for improvement.
-Participates in reviews of security alerts.
Event Response:
-Recognizes and escalates complex security violations to senior team members.
-Follows protocols to take appropriate actions needed to contain and mitigate events.
-Contributes to post-event reviews to identify areas for improvement.
Compliance:
-Contributes to compliance assessments to identify gaps and ensure compliance with internal and external obligations.
-Reviews security compliance deliverables and ensures adherence to policies and industry standards.
-Implements measures to ensure compliance with internal and external obligations , collaborating with relevant stakeholders.
-Maintains inventory systems from a security perspective.
Business Continuity Support:
-Contributes to the development of business continuity and disaster recovery plans, processes, and procedures.
-Ensures the execution of business continuity plans to support critical organizational systems and data in the face of disruptions.
-Participates in assessing readiness for certification and/or audit to identify areas for improvement.
Data Security and Privacy:
-Provides security best judgment and recommends best practices of data security using various tools and techniques such as encryption, hashing, masking, and access management to ensure the confidentiality and integrity of sensitive information.
-Reviews documentation and procedures to identify areas for improvement in data security practices.
Research and Innovation:
-Demonstrates advanced knowledge of industry security practices and seeks opportunities to expand knowledge through self-study and training.
-Stays updated on emerging trends to stay ahead of evolving threats and vulnerabilities.
-Explores novel techniques to solve unique security problems.

Core Responsibilities
Planning & Execution:
-Independently manages work, monitoring timelines and deliverables to ensure projects or initiatives stay on track and meet requirements. Proactively prioritizes work and adapts to resource or timeline shifts, suggesting adjustments to maintain project efficiency.
Collaboration & Partnership:
-Collaborates across teams to align on expectations and achieve shared objectives. Builds and maintains a comprehensive understanding of business, stakeholder, and/or customer needs to build and support effective partnerships. Actively listens to diverse perspectives and asks questions to ensure understanding of others.
Problem Solving:
-Independently identifies and addresses standard and non-standard issues in accordance with standard practices, escalating more complex issues as appropriate. Analyzes data and/or information from multiple sources to troubleshoot standard and non-standard errors. Contributes to knowledge sharing and best practices.
Continuous Learning:
-Embraces continuous learning by actively seeking to build knowledge and new skills and/or tools and staying current with industry trends and best practices. Seeks out and leverages feedback and training to improve skills. Contributes to a culture of continuous learning and knowledge sharing with team members.
Continuous Improvement:
-Develops ideas and recommends updates to increase the efficiency and effectiveness of processes, protocols, and workflows within a team. Seeks input from team members on alternative approaches and methods for improving work.