Security Assurance Engineer

Overview

The Security Assurance Engineer will be part of an elite team of Cyber Security specialists whose mission is to proactively test enterprise information security controls for effectiveness and to coordinate manual or automated remediation of weaknesses and gaps in the detection, prevention and response to cyber attacks.

This member of the Security Assurance team is responsible for identifying and cataloging all security controls within the global AmTrust environment, working with key stakeholders to determine what defines “effectiveness” for each control, and then designing and implementing automated testing of those controls.

• Vet, select and/or design and implement an automated security control testing platform
• Work with key stakeholders to define seurity control requirements
• Design and implement security control tests
• Design and implement a security control defect management system
• Work closely with the Security Operations Center to improve their response and alerting services
• Work closely with the Security Engineering team to improve controls based on emerging threats, control testing results
• Work with other Security Assurance team members to automate security control testing

• Bachelor’s Degree in IT, Cyber Security or Equivalent Experience
• 10+ Years Cyber Security Experience
• 5+ Years Programming or Non-Trivial Scripting Experience

• Software Quality Assurance Experience
• CISSP Certification

• Extensive experience with one or more IT Automation frameworks (Ansible, Terraform, etc)
• Extensive experience with one or more Security Information and Event Management Systems (Splunk ES, IBM QRadar, etc)
• Deep familiarity with one or more offensive security platforms (Metasploit, for example)
• Software Development and Scripting Experience
• Familiarity with the MITRE ATT&CK and DEFEND Frameworks
• An extensive understanding of modern security controls

The expected salary range for this role is $97,500-$150,000/year.

Please note that the salary information shown above is a general guideline only. Salaries are based upon a wide range of factors considered in making the compensation decision, including, but not limited to, candidate skills, experience, education and training, the scope and responsibilities of the role, as well as market and business considerations.