HD Supply Holdings

Senior Info Security Engineer

HD Supply Holdings$100K — $130K *
Information Technology
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • BS/BA or MS/MA in a related discipline.
  • 5-8 years of experience in information security or a related field.
  • Strong understanding of information security risk management concepts and practices.
  • Experience with system security testing and vulnerability scanning.
  • Familiarity with SOX compliance, PCI regulations, and audit processes.
  • Proficiency in scripting for automating security analysis efforts.

Responsibilities

  • Conduct independent testing and evaluation of security systems.
  • Identify and develop methods for detecting and preventing security vulnerabilities.
  • Analyze and reverse engineer source code to improve security detection systems.
  • Implement processes for investigating and analyzing security events.
  • Create and maintain security standard documentation and response procedures.
  • Perform quality checks on data related to audit and investigation processes.
  • Liaise with legal teams and auditors to ensure compliance with security regulations.

Benefits

  • Work in a comfortable indoor environment with minimal unpleasant conditions.
  • Flexibility for movement within the workplace.
  • Limited overnight travel requirements (5-20%).
  • Opportunities for professional development and skill enhancement.
Full Job Description
Job Summary

Responsible for day-to-day efforts on Information security risk management for the organization, focusing on detailed technology issues.

Major Tasks, Responsibilities, and Key Accountabilities
  • Conducts independent test and evaluation of new and existing systems. Performs testing to include system security testing, vulnerability scanning, security configuration reviews of desktop/laptop images, writing test plans, test cases/scripts, status reports and test summary reports.
  • Identifies security vulnerabilities and develops algorithms and methods for detecting and preventing host and network based attacks.
  • Performs advanced analysis and/or reverse engineering of suspect source code and makes the appropriate changes to security event detection systems.
  • Implements the appropriate processes and tools to deliver sound investigations as well as analyze log files for activities surrounding security events.
  • Initiates security response procedures when a problem is detected and methodically creates and updates security standard documentation. Develops attack and defense methodologies for high risk computer networks. Writes scripts and develop software utilities to automate security analysis efforts.
  • Performs a wide range of technical operations related to the location, retrieval, processing, review, analysis, and production of electronic data for discovery, audit, or investigation.
  • Performs quality checks on all data collected, copies final data deliverables to various media, and documents the procedures used in the collection process.
  • Maintains procedures and devices in compliance with SOX compliance, PCI regulations and other regulatory authorities as required. Provides data to internal or external auditors for security and compliance audits. Serves as a liaison between the legal team, outside counsel, IT personnel, and internal organization.

Nature and Scope
  • Identifies key barriers/core problems and applies problem solving skills in order to deal creatively with complex situations. Troubleshoots and resolves complex problems. Makes decisions under conditions of uncertainty, sometimes with incomplete information, that produce effective end results.
  • Independently performs assignments with instruction limited to the expected results. Determines and develops an approach to solutions. Receives technical guidance only on unusual or complex problems or issues.
  • May oversee the completion of projects and assignments, including planning, assigning, monitoring and reviewing progress and accuracy of work, evaluating results, etc. Contributes to employees' professional development but does not have hiring or firing authority.

Work Environment
  • Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
  • Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.
  • Typically requires overnight travel 5% to 20% of the time.

Education and Experience
  • Typically requires BS/BA in a related discipline. Generally 5-8 years of experience in a related field OR MS/MA and generally 3-5 years of experience in a related field. Certification is required in some areas.


About HD Supply Holdings

HD Supply Holdings is a leading distributor of maintenance, repair, and operations (MRO) products to the multifamily and hospitality markets in North America. The company was founded in 1974 and is headquartered in Atlanta, Georgia. HD Supply Holdings offers a wide range of products, including plumbing, electrical, HVAC, hardware, and janitorial supplies, as well as appliances and lighting. The company serves over 500,000 customers through its network of more than 270 branches and 44 distribution centers. HD Supply Holdings is committed to providing its customers with high-quality products and exceptional service.
Learn more about HD Supply Holdings
Size
11,500 employees
Market Cap
$8.6 billion
Industry
Net Income
$1.8 billion
Founded
2007
5 Year Trend
-1.7%
Revenue
$5.1 billion
NASDAQ

Similar Jobs

More Jobs at HD Supply Holdings

More Information Technology Jobs

Find similar Senior Info Security Engineer jobs: