Security Engineer, Assurance

Description

The Security Assurance Engineer will be part of an elite team of Cyber Security specialists whose mission is to proactively test enterprise information security controls for effectiveness and to coordinate manual or automated remediation of weaknesses and gaps in the detection, prevention and response to cyber attacks.

Top Skills' Details

Security control design, automated testing, IT automation and scripting

This member of the Security Assurance team is responsible for identifying and cataloging all security controls within the global AmTrust environment, working with key stakeholders to determine what defines “effectiveness” for each control, and then designing and implementing automated testing of those controls.

Responsibilities

Vet, select and/or design and implement an automated security control testing platform

Work with key stakeholders to define seurity control requirements

Design and implement security control tests

Design and implement a security control defect management system

Work closely with the Security Operations Center to improve their response and alerting services

Work closely with the Security Engineering team to improve controls based on emerging threats, control testing results

Work with other Security Assurance team members to automate security control testing

Qualifications

Required:

Bachelor’s Degree in IT, CyberSecurity or Equivalent Experience

10+ Years Cyber Security Experience

5+ Years Programming or Non-Trivial Scripting Experience

Preferred:

Data Forensics Experience

Software Quality Assurance Experience

CISSP Certification

Technical Skills:

Extensive experience with one or more IT Automation frameworks (Ansible, Terraform, etc)

Extensive experience with one or more Security Information and Event Management Systems (Splunk ES, IBM QRadar, etc)

Deep familiarity with one or more offensive security platforms (Metasploit, for example)

Software Development and Scripting Experience

Familiarity with the MITRE ATT&CK and DEFEND Frameworks

An extensive understanding of modern security controls