We are seeking a
Client Platforms Security Engineer to work with the members of the security team to ensure that our client platform infrastructure, virtual or physical, is properly protected. You will engineer, maintain and implement security controls, audit configurations in a hybrid compute environment. You will generally ensure we are reducing risk footprint across the infrastructure without impacting its effectiveness. A successful candidate will have an attention to detail, the ability to understand what impact their changes will have on the business teams and the services they use.
What you'll be doing:- Maintain security tools and their associated configurations
- Manage and coordinate updates of tools when new versions are released
- Working with platform teams to deploy tools and changes as necessary after validating necessary performance and functionality requirements
- Identify solutions in the market and test them to see if they prove viable for our environment and use case
- Work with the platform teams to ensure the OS builds are as hardened to the extent they can be
- Identify and document ways to measure effectiveness of the client platform controls
- Assess risk in our client platform environment and provide mitigations for those risks
- Identify process improvements for automation of security hardening checks on client platforms
- Work with the operation teams internal and external to ensure identified risks are triaged, investigated, and remediated as necessary
What we're looking for: - Strong verbal, written, and interpersonal communication skills
- Bachelor's degree or relevant work experience required
- Scripting/Development experience in any high-level language with the desire to build upon that repertoire
- Experience maintaining client OS platforms (e.g Windows, Linux, MacOS) in a physical and virtual world.
- Understanding of network fundamentals and protocols.
- Deep technical understanding of client OS platforms (e.g Windows, Linux, MacOS). Mobile OS platforms a plus (e.g. iOS, Android, etc)
- Experience with endpoint security suites and frameworks (e.g. Anti-Virus, EDR/XDR, execution flow control, etc)
- Strong, demonstrable experience in Cybersecurity engineering, design, implementation and documentation
- Experience with leading SOAR and SIEM solutions
Bonus Points For: - Experience managing platforms like CrowdStrike, Sentinel One, or Carbon Black App Control
- Experience working with Qualys and a general understanding of vulnerability management processes
- Experience scripting with languages like Python, Powershell, and the Linux Shell
The annual base salary range for this position is $150,000 to $200,000 depending on the candidate's experience, qualifications, and relevant skill set. The position is also eligible for an annual discretionary bonus. In addition, DRW offers a comprehensive suite of employee benefits including group medical, pharmacy, dental and vision insurance, 401k (with discretionary employer match), short and long-term disability, life and AD&D insurance, health savings accounts, and flexible spending accounts.
[#LI-LD1]
