Principal Security Engineer

Key Responsibilities

Security Monitoring - Security Tool Design and Development:

–         Conducts security assessments of various products and services, analyzing potential vulnerabilities and recommending mitigation strategies.

–         Develops advanced testing tools and methodologies to proactively identify and address security weaknesses.

–         Conducts in-depth security design and coding (e.g., reviewing code, writing code for complex investigation), providing advanced guidance and recommendations for improvement.

–         Participates in reviews of security alerts.

Event Response:

–         Uses expertise to recognize and escalate complex security violations, ensuring prompt response and resolution.

–         Takes appropriate action to contain and mitigate security events, coordinating with relevant teams and stakeholders.

–         Contributes to post-event reviews, providing insights and recommendations for strengthening event response processes.

Compliance:

–         Contributes to compliance assessments, evaluating the effectiveness of security controls and processes.

–         Reviews security compliance deliverables, providing recommendations for enhancing adherence to internal and external obligations.

–         Ensures compliance with internal and external obligations, collaborating with relevant stakeholders to implement necessary measures.

–         Ensures inventory systems are maintained and remain compliant from a security perspective.

Business Continuity Support:

–         Provides guidance on business continuity and disaster recovery plans, processes, and procedures, considering potential risks and vulnerabilities.

–         Ensures the execution of business continuity plans to support critical systems and data during disruptions, implementing appropriate measures and controls.

–         Assesses readiness for certification and/or audit, providing insights and recommendations for enhancing preparedness.

Data Security and Privacy:

–         Recommends best practices and independently applies data security tools and techniques, such as encryption, hashing, masking, and access management, to ensure the confidentiality and integrity of sensitive information.

–         Conducts thorough reviews of documentation and procedures related to data security, identifying and recommending improvements to enhance overall security posture.

Research and Innovation:

–         Applies industry security knowledge through engagement in research activities and collaboration with colleagues to contribute to the development of innovative security solutions.

–         Stays updated on emerging trends and evolving threats, identifying potential implications for the organization and recommending appropriate actions.

–         Explores and evaluates novel techniques and technologies to address complex security problems.

Core Responsibilities

Planning & Execution:

–         Manages and coordinates moderately complex tasks, monitoring timelines and deliverables to ensure timely completion and adherence to requirements for a moderately sized project or initiative.

–         Efficiently delegates, monitors, and prioritizes work across multiple projects, providing technical oversight and adjusting plans to address shifts in resources or timelines.

Collaboration & Partnership:

–         Collaborates across the organization to align on expectations and achieve shared objectives.

–         Leverages understanding of business leaders, stakeholders, and/or customers to ensure proposed solutions meet their needs.

–         Supports inclusivity by actively seeking and listening to diverse perspectives, ensuring others feel heard and respected.

Problem Solving:

–         Identifies and addresses moderately complex issues by analyzing a wide range of data and/or information to identify solutions in accordance with standard practices.

–         Proactively escalates unresolved or critical issues with a thorough assessment and suggests potential solutions.

–         Reviews, contributes to, and documents problem solving strategies.

Continuous Learning:

–         Pursues learning opportunities to expand knowledge and skills and/or tools in new areas and stays abreast of the latest industry trends and best practices.

–         Proactively seeks and leverages ongoing feedback and training to improve skills.

–         Coaches and mentors junior team members, fostering continuous learning and knowledge sharing within and across teams.

Continuous Improvement:

–         Develops ideas, recommends updates, and/or collaborates on the implementation of process improvements to increase the efficiency and effectiveness of processes, protocols, and workflows across teams, and evaluates the impact on key stakeholders.

–         Solicits feedback from others on ideas for alternative approaches and methods for continued improvement.

Performance and Development:

–         Contributes to the talent development pipeline by participating in candidate interviews, assessing candidates, and providing hiring recommendations.