Senior Security Engineer ( active DoD Secret clearance required)
As our Senior Security Engineer, you will be front and center with solving our most complex security challenges. As a Software-as-a-Service platform, Everbridge utilizes a hybrid-cloud ecosystem to achieve worldwide scalability goals. We have Federal and government clients who this role will be focused on ensuring are operating on our secure and highly available platform.About the Team As a member of the security team, you will strive to take a pragmatic approach when proposing security solutions, implement security best practices, guide our architecture, operations, and business toward a security-first posture. In this role you will serve as a liaison between internal compliance resources, external audit and ensure the ongoing compliance assurance of the platform, against various audit standards.
What you'll bring;
- Assess, design, implement, automate, and document security processes and solutions leveraging Amazon Web Service (AWS) and other third-party cloud solutions
- Deploy security solutions in cloud environments
- In-depth knowledge of CIS Cloud Guide, FedRAMP, NIST and implementation approaches that ensure auditable compliance
- Must have experience extracting pertinent security data from systems, audit, logs, and reports for SIEM enablement and audit requests
- Investigate and resolve security violations by providing postmortem analysis to illuminate the issue, and identify causes, possible solutions, and preventative measures
- Ensure optimal collection of program quality metrics as both program performance indicators and enterprise risk indicators
What you'll do;
- Minimum 8 years of information security experience with 2 years Cloud Security focus
- Previous experience with government, and federal system security and compliance reporting
- Working experience with STIGs, RMF, and CC SRG
- Must have active DoD Secret clearance
- Proficient with eMASS
- Work Experience with vulnerability scanners, SIEM, logging, IDS, IPS, etc
- Understanding of Amazon Web Services (AWS) including VPC, ELB, IAM, KMS, EC2, Config, CloudTrail, CloudFormation, Lambda, and others
- Knowledge of network based, system level, and application layer attacks and mitigation methods
- Knowledge of technical security control environments and compliance frameworks including CSA CCM, ISO 27017, FedRAMP
- Active or previous security clearance
- "security+ certification"
- Experience in DevOps environments and maintaining security in CI/CD processes (preferred)
- Experience with the development, deployment, and automation of security solutions in an enterprise cloud-based environment
- Ability to clearly and effectively communicate concerns, issues to other teams
- Experience in developing, documenting, and maintaining security procedures
- Demonstrated experience in conducting security audits and assessments.
- Demonstrated experience in investigating security issues and conducting incident response triage activities