Title: Senior Information Security Engineer

Location: Chandler, AZ

Duration: 12 months

Benefits on offer for this contract position: Health Insurance, Life insurance, 401K and Voluntary Benefits

Summary:

Lead or participate in computer security incident response activities for moderately complex events. Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies. Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards. Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security. Review and correlate security logs. Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity. Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives. Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals.

Responsibilities:

• Maintain and expand the configuration of the enterprise static application security testing system, Checkmarx, to improve effectiveness and coverage
• Provide expert, 3rd level support
• Provide best practices documentation
• Drive vendor accountability to address product defects
• Support patching, upgrade, and business continuity testing
• Collaborate with Application Security Champions, development team members, and other Cybersecurity teams as a product SME
• Collaborate with offshore partners

Qualifications:

• Checkmarx or equivalent SAST tool experience, including custom rule development
• Scripting experience (Python preferred)
• Application security experience
• Experience with Agile and CI/CD technologies such as Jira, Kubernetes, Jenkins, etc.
• Able to troubleshoot complex technology integration issues
• Strong verbal, written, and interpersonal communication skills
• Excellent customer service skills