Sr. Security / DevSecOps Engineer

Company: Zyston LLC
Location: Alpharetta
Posted on: December 3, 2019

Job Description:

Zyston's client has requested our assistance in helping them locate and hire an Information Security Engineer. To be considered, you will have experience in the following: Security Engineering Compliance monitoring and GRC experience DevSecOps (automation) experience Cloud experience (preferably AWS) As the Security Engineer you will be responsible for assessing vulnerabilities on our hardware and software, findings and reports to management and while creating innovative solutions. You will set up and modify existing protocols and procedures to ensure standards are met. A day in your life as a Security Engineer may include: Assess and evaluate the existing security posture including platforms and tools Harden tooling and instrumentation to prevent cyber exploits in an IoT environment Perform regular security assessments on infrastructure and monitor information systems activities and systems to confirm security policy compliance Work with stakeholders to ensure security standards and policies are meeting company needs Conduct risk assessment on new products, systems and applications Identifies, develops and implements new ways to detect security incidents Automate security scanning operations, alternations and reporting Promote a culture of security in the software development life cycle across teams Ethically hack systems to ensure best in class cyber-security To be an amazing Security Engineer, you will have: Bachelor's degree in Computer Science, Computer Engineering or related field At least 7 years experience as a Security Engineer CISSP certification or relevant experience Experience with both Cloud and on-premise infrastructure (AWS required) Experience with device security (Android) Experience with Infrastructure as Code (IaC) Experience with compliance monitoring - be ready for an audit at any time for standards including GDPR, SANS 20, NIST, etc. Experience with automated tools in the CI pipeline such as OWASP Zap, Sonarqube SAST, etc. Proficient with vulnerability scanning tools such as Nessus, Nextsparker, Wireshark, OpenVAS, etc. Experience working across teams to train and ensure secure delivery of products Experience triaging vulnerabilities, response automation and reporting Experience researching, developing and implementing new security practices and protocols Entrepreneurial mind set and strong sense of ownership

Keywords: Zyston LLC, Alpharetta , Sr. Security / DevSecOps Engineer, Engineering , Alpharetta, Georgia