Full Job Description
Your key responsibilities
• Engineer security solutions and services following all relevant AMG standards and practices for On-Premise, Hybrid and Cloud-Based environments.
• Implement and support solutions/technologies (includes production support and documentation): network proxies, intrusion detection/prevention systems, remote access, second factor authentication, security event monitoring, infrastructure and system hardening, patch deployment and vulnerability management.
• Take accountability for the design, delivery and maintenance of new and existing security solutions or services, driving compliance with and contributing to the development of relevant standards.
• Apply modern standards/principles, global product-specific guidelines, security standards, design standards, industry frameworks to security solutions and services as appropriate.
• Look for ways to optimize security processes and recommend opportunities and solutions for improvement and automation.
• Help coordinate and drive remediation of identified risks and control deficiencies.
• Work in a diverse, global environment and build strong relationships across all levels of a matrixed, geographically, and culturally dispersed organization.
• Flexible to work outside of regular office hours to accommodate team and organizational calls and meetings. Weekend or late-night work may occur during the project and early life cycle support phases.
• No direct supervision responsibilities, though technical leadership is required within assigned projects.
Skills and attributes for success
• Intermediate skills in planning, designing, and solving complex security solutions and services
• Technical knowledge in designing and implementing within at least one or more of the following security domains:
• Network Security
• Cloud Security
• Identity & Access Management (IdAM)
• Application Security (Container Security tools, Docker, Kubernetes)
• Governance, Risk, and Compliance (GRC)
• Cloud-based or On-Premise SIEM, Vulnerability Management
• Communicate fluently in English, both written and verbal and able to communicate technical concepts effectively
• Excellent interpersonal communication and organizational skills and the ability to work within tight timeframes
• Rapidly learn new and emerging technologies with ability to rapidly define engineering standards
To qualify for the role, you must have
• Desire to work in a diverse, fast-paced environment
• Bachelor's Degree in Computer Science, Engineering, IT, Mathematics or a related field, or equivalent work experience required
• 1+ years of Information Security experience
• 3+ years demonstrated ability in an IT Engineering function
• Thorough knowledge of industry frameworks (NIST, ISO etc.), security fundamentals
• Technical proficiency in Google Cloud services, hybrid, and on-premise security solutions including Linux and Windows Operating Systems
• Technical proficiency with writing custom, scripting tools (Python, Ansible, PowerShell, etc.), interacting with API's and shell scripting
• Strong analytical and problem-solving skills
• Understanding of other technologies required to run a secure, enterprise level infrastructure that adhere to security best practices
• Excellent time management, organizational, and decision-making skills
• Ability to document processes, procedures, and security designs clearly and accurately for distribution to internal teams and customers
Ideally, you'll also have
• Technical experience in global IT & Security environments
• At least one technical certification (e.g.CISSP/CISM/CISA, GCP Certification etc.)
What we look for
A self-starter, independent-thinker, curious and creative person with ambition to learn and passion for delivering security solutions and services.