Principal Security Engineer

Develops advanced testing tools and methodologies to proactively identify and address security weaknesses. Uses expertise to recognize and escalate complex security violations, ensuring prompt response and resolution. Contributes to compliance assessments, evaluating the effectiveness of security controls and processes. Recommends best practices and independently applies data security tools and techniques, such as encryption, hashing, masking, and access management, to ensure the confidentiality and integrity of sensitive information.

Key Responsibilities

Security Monitoring - Security Tool Design and Development

• Conducts security assessments of various products and services, analyzing potential vulnerabilities and recommending mitigation strategies.
• Develops advanced testing tools and methodologies to proactively identify and address security weaknesses.
• Conducts in-depth security design and coding (e.g., reviewing code, writing code for complex investigation), providing advanced guidance and recommendations for improvement.
• Participates in reviews of security alerts.

Event Response

• Uses expertise to recognize and escalate complex security violations, ensuring prompt response and resolution.
• Takes appropriate action to contain and mitigate security events, coordinating with relevant teams and stakeholders.
• Contributes to post-event reviews, providing insights and recommendations for strengthening event response processes.

Compliance

• Contributes to compliance assessments, evaluating the effectiveness of security controls and processes.
• Reviews security compliance deliverables, providing recommendations for enhancing adherence to internal and external obligations.
• Ensures compliance with internal and external obligations, collaborating with relevant stakeholders to implement necessary measures.
• Ensures inventory systems are maintained and remain compliant from a security perspective.

Business Continuity Support

• Provides guidance on business continuity and disaster recovery plans, processes, and procedures, considering potential risks and vulnerabilities.
• Ensures the execution of business continuity plans to support critical systems and data during disruptions, implementing appropriate measures and controls.
• Assesses readiness for certification and/or audit, providing insights and recommendations for enhancing preparedness.

Data Security and Privacy

• Recommends best practices and independently applies data security tools and techniques, such as encryption, hashing, masking, and access management, to ensure the confidentiality and integrity of sensitive information.
• Conducts thorough reviews of documentation and procedures related to data security, identifying and recommending improvements to enhance overall security posture.

Research and Innovation

• Applies industry security knowledge through engagement in research activities and collaboration with colleagues to contribute to the development of innovative security solutions.
• Stays updated on emerging trends and evolving threats, identifying potential implications for the organization and recommending appropriate actions.
• Explores and evaluates novel techniques and technologies to address complex security problems.

Core Responsibilities

Planning & Execution

• Manages and coordinates moderately complex tasks, monitoring timelines and deliverables to ensure timely completion and adherence to requirements for a moderately sized project or initiative.
• Efficiently delegates, monitors, and prioritizes work across multiple projects, providing technical oversight and adjusting plans to address shifts in resources or timelines.

Collaboration & Partnership

• Collaborates across the organization to align on expectations and achieve shared objectives.
• Leverages understanding of business leaders, stakeholders, and/or customers to ensure proposed solutions meet their needs.
• Supports inclusivity by actively seeking and listening to diverse perspectives, ensuring others feel heard and respected.

Problem Solving

• Identifies and addresses moderately complex issues by analyzing a wide range of data and/or information to identify solutions in accordance with standard practices.
• Proactively escalates unresolved or critical issues with a thorough assessment and suggests potential solutions.
• Reviews, contributes to, and documents problem solving strategies.

Continuous Learning

• Pursues learning opportunities to expand knowledge and skills and/or tools in new areas and stays abreast of the latest industry trends and best practices.
• Proactively seeks and leverages ongoing feedback and training to improve skills.
• Coaches and mentors junior team members, fostering continuous learning and knowledge sharing within and across teams.

Continuous Improvement

• Develops ideas, recommends updates, and/or collaborates on the implementation of process improvements to increase the efficiency and effectiveness of processes, protocols, and workflows across teams, and evaluates the impact on key stakeholders.
• Solicits feedback from others on ideas for alternative approaches and methods for continued improvement.

Performance and Development

• Contributes to the talent development pipeline by participating in candidate interviews, assessing candidates, and providing hiring recommendations.

Minimum Job Qualifications

Education and/or Experience

11 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.

Job Skills

Same as prior level plus;

Threat Modeling Demonstrated ability in or knowledge of threat modeling, including applying techniques to identify and mitigate security risks and vulnerabilities.

Compliance Demonstrated knowledge of and adherence to regulatory, legal, and organizational compliance requirements.

Technical Writing Demonstrated ability in or knowledge of technical writing, including developing and maintaining accurate technical documentation.

Innovation Demonstrated ability in or knowledge of innovation, including generating or supporting new ideas, technologies, or processes for organizational growth.

Thought Leadership Demonstrated ability to provide thought leadership and drive adoption of best practices within teams or industry.

Cross-Functional Team Leadership Demonstrated experience successfully leading cross-functional teams in project or product delivery.

Training and Development Demonstrated ability to design and deliver effective training programs to build team and individual capabilities.

Security Assurance Demonstrated ability in or knowledge of security assurance, including providing evidence of meeting security obligations and implementing security gating.

Preferred Job Qualifications

Education and/or Experience

11 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.

Cloud or Internet Software Security Experience

3 years of experience working on high-impact projects related to cloud or internet software security.

Programming/Scripting Experience

3 years of experience working with one or more of the following programming or scripting languages (e.g., Go, Java, Python, or C/C++).

Cloud Experience

2 years of experience with AWS Solution, Azure 900 Fundamentals, OCI Fundamentals, or equivalent cloud experience.

Information Security Certifications

Information security or equivalent certifications (e.g., Certified Oracle Cloud Infrastructure Security Professional, Certificate of Cloud Security Knowledge [CCSK], Certified Information Security Manager [CISM], Certified Information Systems Security Professional [CISSP], Certified Ethical Hacker [CEH], Certified Cloud Security Professional [CCSP],