Security Principle

Job Description - Security Principle (180000Z6)

Security Principle - 180000Z6

At CWT, our Information Security team is looking for a Security Principle to join the team at our Minnetonka office.

• Work closely with product and platform teams to engineer and implement cloud security controls with a focus on Dev Sec Ops
• This role will fundamentally change the way CWT security processes and tools are integrated within Dev Ops
• Implement a tools driven and highly automated approach to deliver our key security management processes by exploiting investment in existing tooling and/or identify new tooling.
• Design and implement AWS/Cloud based Dev Sec Ops  processes and tools
• Develop procedures to automate security tasks during code builds and deployments
• Respond to and, when appropriate, resolve or escalate security incidents
• Report unresolved security exposures, misuse of resources, and noncompliance situations using defined escalation processes.
• Assist and train team members in the use of cloud security tools and the resolution of security issues
• Develop and maintain documentation for security systems and procedures
• Collaborate with the Ops team to build infrastructure and servers on AWS
• Evaluate and recommend use of ML, AI, and data analytic services to enable action based events and triggers
• Actively involved in cloud environment threat hunting using manual and automated tools
• Build working relationships with corporate technology and business teams
• Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale.
• Evaluate security technologies for cloud environments in order to implement controls in the most streamlined and integrated manner
• Deploy automated security solutions for cloud delivery processes
• Develop cloud security solutions to enable production security operations (SOC)
• Deploy compliance solutions for large-scale cloud environments using container and microservice technologies
• Develop security and compliance capabilities in support of Dev Ops processes
• Develop & deploy automated solutions to secure cloud development processes
• Craft and evangelize secure cloud platform & product requirements
• Communicate security risks and solutions to business partners, platform & product teams
• Embrace a culture of continuous service improvement and service excellence
• Stay current on security industry trends

• Bachelor's Degree in Computer Science or related field or equivalent experience
• Certified Information Systems Security Professional (CISSP) and/or Certified Cloud Security Certification (CCSP) and/or AWS certifications (or ability to obtain within 6 months)
• Overall 2 years of experience in Technology with extensive experience in cloud solutions (AWS)
• Experience with implementing and automating Cloud Dev Sec Ops  including technologies such AWS Cloud Formation, Troposphere, Puppet, Chef, or Ansible. Knowledge of AWS automation strategies and tools
• Solid understanding of Amazon Web Services (AWS) including VPC, ELB, IAM, KMS, EC2, Config, Cloud Trail, Cloud Formation, Lambda, and others
• 2-5 years of hands on experience in cloud, devops, or big data platforms and all technical security domains
• Knowledge of network based, system level, and application layer attacks and mitigation methods
• Extensive Experience working with container technology including Docker and Kubernetes
• Experience with the development, deployment, and automation of security solutions in an enterprise cloud based environment
• Experience with a broad range of security technologies including, SIEM, DLP, IDS/IPS, IAM
• Strong knowledge of technology and security topics including network and application security, infrastructure hardening, security baselines, web server, and database security

Standard

Information Technology

Global

No

Day Job

P&T_Security & Risk

3 to 5 years

Mar 22, 2018

As an Equal Opportunity Employer/Affirmative Action employer, the organization will not discriminate in its employment practices due to an applicant’s race, color,…