Senior Cybersecurity Engineer

Job Title: Senior Cybersecurity Engineer

We are seeking a highly skilled Senior Cybersecurity Engineer to lead the implementation and maintenance of assigned information security solutions. As a key member of our team, you will be responsible for developing and documenting detailed standards, guidelines, processes, and procedures.

Key Responsibilities:

• Leads the implementation and maintenance of assigned information security solutions.
• Develops and documents detailed standards, guidelines, processes, and procedures.
• Assists the Information Security team in monitoring security systems, reviewing logs, and managing information security systems.
• Conducts regular security vulnerability assessments and provides exception reporting and remediation plans to leadership.
• Designs and performs internal and external penetration validation testing to ensure that computer systems are up-to-date relative to all operating systems, patches, and virus protection software.
• Collaborates with other technology teams, including Engineering, to design and implement remediation solutions.
• Identifies, reports, and provides assistance during information security incidents as part of an Incident Response Team.
• Reviews and responds to security alerts to investigate malicious activity.
• Supports evaluation of new security technologies that address both current and future needs based on emerging threats and industry trends.
• Keeps up-to-date with exploits relevant to the retail sales environment.
• Solves complex architecture design and business problems, ensuring solutions are extensible, work to simplify, optimize, and remove bottlenecks, etc.
• Provides mentoring and guidance to more junior-level engineers, may provide feedback and direction on specific engineering tasks.
• Responds to escalated security issues for enterprise systems, facilitates advanced diagnosis and troubleshooting when necessary.
• Participates in the implementation of hardware and software changes into environments to ensure security requirements are met.
• Provides input into security breach response procedures and helps lead security breach response activities.
• Leads break-fix activities, escalating problems to senior management and/or vendors as appropriate.
• Analyzes the output of industry-standard cybersecurity tools and identifies remediations to reduce risk and exposure of applications.
• Completes custom enhancements of applications using secure coding techniques to reduce the threat of remote or local vulnerabilities.
• Evaluates entire applications, Container, Infrastructure, host platform, to identify potential threats and vulnerabilities.

Requirements:

• Bachelor's Degree in Computer Science, CIS, Engineering, Cybersecurity, or related field, or equivalent work experience in a related field.
• 5 Years of experience in technology system support, software development, or a related field.
• 2 Years of experience with information security applications and systems.

Preferred Qualifications:

• 4 Years of experience working on projects involving the implementation of solutions applying development life cycles, SDLC.
• 1 Year DevOps experience.
• 3 Years of experience evaluating entire applications, Container, Infrastructure, host platform, to identify potential threats and vulnerabilities.
• 3 Years of experience in the custom enhancement or development of applications using secure coding techniques to reduce the threat of remote or local vulnerabilities.
• Advanced understanding of information security practices and policies.
• 5 Years of IT experience developing and implementing business systems within an organization.
• 5 Years of experience working with defect or incident tracking software.
• 5 Years of experience writing technical documentation in a software development environment.
• 3 Years of experience working with an IT Infrastructure Library, ITIL, framework.
• 3 Years of experience leading teams, with or without direct reports.