Senior Security Engineer

Description

• Suggest actions in order to mitigate risk in any activity that potentially impacts security of existing IT and information management.
• Perform application and infrastructure penetration tests, as well as physical security review and social engineering tests for our global clients
• Recommend actions/practices to management in order to ensure compliance with security and regulatory requirements in decision-making processes.
• Perform security reviews of application designs, source code and deployments
• Oversee and manage the deployment, integration and configuration of security solutions and of any enhancements to existing security solutions and the enterprise’s security documents.
• Select and acquire additional security solutions or enhancements to existing security solutions to improve overall enterprise security
• Develop and maintain threat models for cloud environments and train engineering teams to develop attacker/risk driven design skills
• Craft responses to client and partner security questionnaires
• Maintain Incident Response Program.
• Provide deep expertise to engineering teams on SDLC practices including secure design, secure development, secure testing, security runtime for software and firmware development
• Actively partner with infrastructure, application and other stakeholders to ensure deployed solutions minimize security and privacy risks.
• Maintain up-to-date knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks.
• Perform security audits
• Determine, monitor and maintain our security posture, in collaboration with Engineering.

Requirements

• Proven team experience and comfort in a team-oriented environment
• CISSP, CISA, CEH, OSCP or other information security certification
• B.A. or B.S. (or higher level degree) in Computer Science or a similar engineering program with strong academic performance preferred
• Strong verbal and written communication skills for a highly collaborative environment
• Rigorous attention to detail and focus on quality of deliverables
• Familiarity with something like Terraform/CloudFormation.
• 8+ years of information security experience
• Comfortable with Python and able to read Java when necessary.
• Must have knowledge and stay up to date on the latest security advisories, alerts and vulnerabilities.
• Familiar with AWS services like EC2 & ECS, WAF & VPC configuration & IAM rules.

Benefits

• Collaborate with outstanding people: We hire only the best. Our standards are high and our employees enjoy working alongside other high achievers.
• Gain well rounded experience: Alarm.com offers a diverse and dynamic environment where you will get the chance to work directly with executives and develop expertise across multiple areas of the business.

Training + Development

Interview process

Visa Sponsorship

Security clearance