Senior Information Systems Security Engineer

About This Role

This Senior Information Systems Security Engineer role involves safeguarding digital assets and sensitive information within containerized environments, service mesh technologies, and microservices. The ideal candidate will have a strong background in cybersecurity, a deep understanding of current threats and vulnerabilities, and the ability to implement robust security measures. You will contribute to the design, implementation, and maintenance of cybersecurity infrastructure while staying abreast of emerging trends in the field.

Responsibilities

• Serve as a security engineering subject matter expert for containerized environments, service mesh technologies, and microservices
• Design, implement, and manage security controls for containerized workloads solutions, including image scanning firewalls, intrusion detection/prevention systems, endpoint protection, and encryption mechanisms, runtime protection, role-based access control (RBAC), and network segmentation
• Integrate security into CI/CD pipelines and Dev Sec Ops workflows, ensuring compliance with RMF, NIST SP 800-53, ICD 503, and FedRAMP requirements
• Configure and optimize security monitoring and logging solutions and work with container security tools such as Prisma Cloud or similar
• Monitor network traffic, system logs, and security alerts to detect and respond to potential security incidents
• Analyze and investigate anomalies and security breaches, taking appropriate actions to mitigate risks
• Monitor and assess threat intelligence feeds, conduct threat analysis, and perform risk assessments to proactively identify emerging threats and vulnerabilities
• Collaborate with platform engineers, ISSOs, and developers, among other cross-functional teams, to establish, embed, and enforce security policies, standards, and procedures throughout the system lifecycle
• Conduct regular security assessments of container orchestration platforms, microservices, and APIs to identify vulnerabilities and weaknesses in systems, networks, and applications and recommend mitigations
• Develop and implement incident response plans to effectively address security breaches, incidents, and other security concerns
• Work closely with cross-functional teams, including IT, software development, and compliance, to integrate security into all phases of the development lifecycle and ensure a comprehensive approach to cybersecurity
• Maintain thorough and accurate documentation of security architecture processes, control implementation procedures, configurations, and continuous monitoring strategies
• Prepare detailed reports on security findings, incidents, and actions taken

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field
• 7+ years of experience as a cybersecurity engineer with a specialization in designing and building implementations of required security controls