About the Role
Title: Senior Security Engineer TVM – Remote
Location: Minnetonka MN US
Full Time
The Senior Security Engineer will lead the deployment, integration, and operationalization of Threat and Vulnerability Detection Platform across the enterprise. The Senior Security Engineer will have very solid interpersonal skills, be a self-starter, and have a desire to maintain enterprise-wide visibility to initiatives related to threat and vulnerability detection technologies and services. The Senior Security Engineer is an individual contributor role with deep expertise in Operating systems, and software vulnerability management.
You’ll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges.
Primary Responsibilities:
- Lead the deployment and integration of the Threat and Vulnerability Platform integration in across the enterprise tool sets (SIEM, XDR, Reporting, etc…)
- Design, implement and manage security controls to safeguard infrastructure, systems, and data
- Conduct vulnerability assessments and audits to ensure compliance with federal regulations and standards (e.g. FedRAMP, NIST)
- Collaborate with cross functional teams to identify security requirements and develop solutions
- Develop and maintain security documentation including policies and procedures
- Stay current with emerging security threats and technologies, providing recommendations for continuous improvement
- Review, test, and configure scanning and reporting results to key stakeholders
- Mentor and provide guidance to junior security engineers and other team members
Required Qualifications:
- 5+ years of experience in security engineering with 2+ years in a senior or lead role
- 3+ experience with threat and vulnerability management platforms
- 3+ years of firewall, intrusion detection systems, and antivirus solutions
- 3+ years of experience working with a wide array of operating systems (e.g. Linux, Windows, Ubuntu, etc.)
- 3+ years of experience with common risk assessment framewoks (e.g. NIST 800-53, NIST CSF, FedRamp, ISO27001, HiTrust, CIS)
Preferred Qualifications:
- Relevant security certifications – CISSP or equivalent
- Familiarity with DoD, VA, DHA risk management processes (RMF, ATO)
- Knowledge of advanced threat detection and response techniques
- Familiarity and in-depth knowledge of FedRAMP and NIST security frameworks and compliance standards
- Solid understanding of fundamental security principles/concepts (Networking, Encryption, IAM)
- Proven outstanding written and verbal communication skills, with the ability to work collaboratively in a team environment
- Proven excellent problem-solving skills, with the ability to analyze complex security issues and develop effective solutions