Job Description
This position is located in Seattle, Washington and limited-term position for 9 months. Relocation will not be provided.
Your Role
Information Security is seeking an experienced and highly skilled individual for our Senior Engineer role. In this role you will work across teams to combine security and business requirements to develop, prototype, document, and communicate technical security controls to ensure security outcomes and manage risk at scale for our foundation and affiliated entities. Additionally, you will design and implement operational security practices performed by implementation teams and service providers and serve as a partner and decision maker related to security operations, including performing incident response. This role is critical in performing and contributing to the continuous improvement of the foundation’s global Information Security program. This is an individual contributor role reporting to the Deputy Director, Information Security.
What You’ll Do
- Participate in the Information Security design process focusing on technical controls, including:
- In partnership with technology delivery teams, further refine, prototype, and continuously improve technical security controls as implemented across our technology environment
- Partner engagement to account for key business objectives and user personas
- Risk management and tracking through the implementation and operation of the design outputs
- Further refine, prototype, and test the design and continuous improvement of the Information Security portfolio including technology, services, and processes to achieve our core risk management objectives
- Perform Information Security incident investigation and response Communicate our design philosophies, reference architectures, and use cases to ensure our technology partners and service providers have the knowledge they need to innovate and operate technical solutions safely
- Partner with IT teams during solution design and operation to develop implementation steps for security configuration
Your Experience
- At least 5 years of experience in the Information Security field
- 2+ years of experience leading Information Security incident investigation and response 3+ years of experience with security preventative and detective controls such as endpoint protection, firewall policies, vulnerability management, SIEM, Microsoft Defender suite
- Excellent collaboration, interpersonal, communication and facilitation skills with ability to present and influence audiences of varying skill levels
- Experience in Security and regulatory compliance standards and frameworks such as: HIPAA, NIST CSF, ISO27001, and GDPR
- Experience with controls configuration within common cloud environments (Azure, AWS)
- Experience with scripting and automation tools knowledge: Azure Sentinel and KQL, PowerShell, Python, Terraform, Ansible or related
- Experience with application containerization and orchestration: Docker and Kubernetes or related
- Experience with source code management (Git, GitHub, GitLab) and CI/CD (GitLab CI, Jenkins, Drone, Azure DevOps)
- Experience with Microsoft Windows (server/desktop) and Linux (CentOS/Ubuntu/RedHat) Experience with identity and access management industry standard methodologies and related solutions (i.e., Active Directory, Azure AD, LDAP, SSO, MFA and related technologies)
- Experience with networking protocol and tools, which may include TCP/IP, DNS, DHCP, SSL/TLS, VPN, VLAN, SSH, BGP, OSPF
- Experience with server virtualization technologies: VMware, Hyper-V, Nutanix, KVM or other
- Strong understanding of authentication and authorization technologies and protocols including SAML, OAuth, Kerberos
- High performance compute cloud architecture experience a plus
- B.S. in Engineering, Math, Computer Science, or related field or equivalent working experience
Disclaimer: Applications will be received until this position is filled
