Principal Security Engineer

Key Responsibilities

Security Monitoring - Security Tool Design and Development:

– Conducts security assessments of various products and services, analyzing potential vulnerabilities and recommending mitigation strategies.

– Develops advanced testing tools and methodologies to proactively identify and address security weaknesses.

– Conducts in-depth security design and coding (e.g., reviewing code, writing code for complex investigation), providing advanced guidance and recommendations for improvement.

– Participates in reviews of security alerts.

Event Response:

– Uses expertise to recognize and escalate complex security violations, ensuring prompt response and resolution.

– Takes appropriate action to contain and mitigate security events, coordinating with relevant teams and stakeholders.

– Contributes to post-event reviews, providing insights and recommendations for strengthening event response processes.

Compliance:

– Contributes to compliance assessments, evaluating the effectiveness of security controls and processes.

– Reviews security compliance deliverables, providing recommendations for enhancing adherence to internal and external obligations.

– Ensures compliance with internal and external obligations, collaborating with relevant stakeholders to implement necessary measures.

– Ensures inventory systems are maintained and remain compliant from a security perspective.

Business Continuity Support:

– Provides guidance on business continuity and disaster recovery plans, processes, and procedures, considering potential risks and vulnerabilities.

– Ensures the execution of business continuity plans to support critical systems and data during disruptions, implementing appropriate measures and controls.

– Assesses readiness for certification and/or audit, providing insights and recommendations for enhancing preparedness.

Data Security and Privacy:

– Recommends best practices and independently applies data security tools and techniques, such as encryption, hashing, masking, and access management, to ensure the confidentiality and integrity of sensitive information.

– Conducts thorough reviews of documentation and procedures related to data security, identifying and recommending improvements to enhance overall security posture.

Research and Innovation:

– Applies industry security knowledge through engagement in research activities and collaboration with colleagues to contribute to the development of innovative security solutions.

– Stays updated on emerging trends and evolving threats, identifying potential implications for the organization and recommending appropriate actions.

– Explores and evaluates novel techniques and technologies to address complex security problems.

Core Responsibilities

Planning & Execution:

– Manages and coordinates moderately complex tasks, monitoring timelines and deliverables to ensure timely completion and adherence to requirements for a moderately sized project or initiative.

– Efficiently delegates, monitors, and prioritizes work across multiple projects, providing technical oversight and adjusting plans to address shifts in resources or timelines.

Collaboration & Partnership:

– Collaborates across the organization to align on expectations and achieve shared objectives.

– Leverages understanding of business leaders, stakeholders, and/or customers to ensure proposed solutions meet their needs.

– Supports inclusivity by actively seeking and listening to diverse perspectives, ensuring others feel heard and respected.

Problem Solving:

– Identifies and addresses moderately complex issues by analyzing a wide range of data and/or information to identify solutions in accordance with standard practices.

– Proactively escalates unresolved or critical issues with a thorough assessment and suggests potential solutions.

– Reviews, contributes to, and documents problem solving strategies.

Continuous Learning:

– Pursues learning opportunities to expand knowledge and skills and/or tools in new areas and stays abreast of the latest industry trends and best practices.

– Proactively seeks and leverages ongoing feedback and training to improve skills.

– Coaches and mentors junior team members, fostering continuous learning and knowledge sharing within and across teams.

Continuous Improvement:

– Develops ideas, recommends updates, and/or collaborates on the implementation of process improvements to increase the efficiency and effectiveness of processes, protocols, and workflows across teams, and evaluates the impact on key stakeholders.

– Solicits feedback from others on ideas for alternative approaches and methods for continued improvement.

Performance and Development:

– Contributes to the talent development pipeline by participating in candidate interviews, assessing candidates, and providing hiring recommendations.