Principal Security Engineer

We’re looking for a security-minded, hands-on senior individual with extensive Security Operations and Threat Intelligence experience to support our global 24x7 monitoring and incident response programs.   The candidate must have strong operational knowledge of the security tool landscape and has a track record of optimizing and automating processes to achieve measurable efficiency and accuracy gains. This role is integral to the GIS program, and works directly alongside the Security Architecture / Engineering, Tech Infrastructure and Network teams.

Responsibilities

• Be a thought leader and industry expert in the company for a significant technical vertical related to Security Operations
• Develop and execute on Security Operations strategy, deliver new or enhance existing security controls and analyze/maintain new or existing security applications/products
• Engage with executive level leaders to explain concepts, present roadshows for major initiatives and programs
• Lead global security operations projects and act as a team lead and mentor to Senior Security Engineers and Security Engineers.
• Designing and implementing security processes to support security monitoring and incident response using best-in-class security engineering principles; experience with the MITRE standards is a plus
• Strong experience with security metrics and measurements and process automation – understand how to measure monitoring/IR processes and how to improve them based on historical data
• Partner with Solutions Security Engineers to identify and evaluate best in class security solutions and plan production deployments and help document runbooks accordingly
• Lead or coordinate enterprise cybersecurity tabletop exercises across cross-function teams
• Assist with cybersecurity forensics and investigations

Knowledge and Skills

• Strong understanding of security monitoring and incident response processes and concepts
• Strong understanding of MITRE TTPs or similar
• Demonstrated past contributor and “plugged-in” to the threat intelligence community and various industry sources
• Understand what it means to “think like a hacker” and take the attacker viewpoint
• Familiarity with Dark Web and related concepts
• Experience with operating security tools such as Intrusion Detection/Prevention Systems, Email Security, Data Security, Cloud Security, Network and Application Security

Required Experience

• 5+ years of relevant security operations and threat intelligence experience
• 10+ years of IT experience

Preferred Experience

• CISSP or equivalent

Key Differentiator

• Security operations and threat intelligence experience
• Strong communicator who can partner internationally with senior security and application team members
• Self starter, takes initiative with strong conviction

Estimated Salary: $118,000 - $157,000

The base salary range represents the anticipated low and high end of the GHX’s salary range for this position. Actual salaries will vary and will be based on various factors, such as candidate’s qualifications, skills, competencies and proficiency for the role. The base salary is one component of GHX’s total compensation package for employees. Other rewards and benefits include: health, vision, and dental insurance, accident and life insurance, 401k matching, paid-time off, and education reimbursement, to name a few. To view more details of our benefits, visit us here: https://www.ghx.com/about/careers/

 #LI-SR #LI-Remote