Senior Security Operations Engineer

About the Role
The Senior Security Operations Engineer will be responsible for partnering with engineering and operations teams to support the organization's long-term security strategy. They will apply hands-on technical skills, critical thinking, and strong leadership abilities to design and implement effective security solutions to reduce risk in the Mastery environment.
The Senior Security Engineer must be comfortable communicating with team members and cross-functional partners, working with multiple security technologies, prioritizing security risks, and driving technology and process implementations/improvements to secure systems, data, and the Mastery user community.
This role requires a strong background in security as it relates to network, cloud security, container security, and risk assessment.
Responsibilities:

• Lead the implementation of security projects that include, but are not limited to: DLP, image retention/best practices, user/device policy management.
• Provide technical guidance on secure configuration and hardening for systems in alignment with security best practices, policies/standards, and compliance requirements. Monitor for compliance.
• Partner with engineering and operations teams to implement security tools/controls for endpoints, network, and cloud infrastructure.
• Monitor threat and vulnerability data sources for emergent risks.
• Conduct risk assessments to support the risk management process.
• Work with vendors to properly configure security tools and diagnose/troubleshoot problems.
• Identify opportunities to improve processes and technologies to reduce security risk and be a change agent to address these gaps.
• Work directly with the compliance team to implement policies and controls that align with industry standard frameworks.
• Create security standards, best practices, requirements, design documents, run books, processes, and procedures documentation.
• Plan and execute sprint-based initiatives to achieve annual roadmap goals.
• Produce key metrics for the security program.
• Perform consistently at or above outlined expectations and deliver on-time, quality work.
• Mentor junior staff members.
• Foster a security culture by developing and facilitating security awareness training.
• Communicate complex security and technical topics in easy-to-understand language to a variety of audiences.
• Build consensus for delivering results while finding common ground for collaboration and partnership within security team and cross-functionally.
• Perform additional projects as assigned by leadership.

Basic Qualifications:
Education/Certifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or Information Technology preferred or equivalent experience.

• CISA, CISM, CISSP, or GIAC certifications a plus

Professional Experience

• 5+ years Information Security, IT Audit, or related field
• Prior experience in one or more technical discipline (cloud, endpoint security, networking, vulnerability management, application security)

Preferred Knowledge/Skills

• Microsoft Azure cloud computing experience
• Azure Kubernetes
• Cloud based automation tools (Ansible and Terraform)
• Strong understanding of security operations concepts such as perimeter defense, BYOD management, data loss protection, insider threat, kill-chain analysis, risk assessment, security metrics, threat modeling
• Strong understanding of NIST and MITRE attack framework
• Strong security tools and technologies experience (Microsoft Defender, Microsoft Purview, Intune, JAMF, Akamai, Sentinel, etc.)
• Understanding of networking, hosting, and containerization technologies
• Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)
• Knowledge of database administration and configurations
• Understanding of system security vulnerabilities and remediation techniques
• Programming/scripting languages (Python, PowerShell, etc.)
• Demonstrated experience in PowerBI
• Understanding of IT audit and compliance standards such as SOC 1, SOC 2, SOX, ISO 27001, etc.

Additional Knowledge/Skills

• Understanding of sprint based agile methodologies
• Experience with Jira project management, tracking of work, and ticket creation
• Knowledge of Confluence documentation intake, review, and tracking

About Mastery
Mastery Logistics Systems is building the world's first lovable Transportation Management System, or TMS.
Our customers - large transportation companies and shippers who need those companies - have struggled with systems that are outdated or inadequate. As shippers or transportation service providers, our customers have in the past been forced to use multiple systems to manage dedicated fleet operations, outsourced or insourced trans management, one way trucking, truckload brokerage, LTL, and Intermodal, or to sub-optimize one or more of those functions by attempting to fit it into a TMS that is adequate at another function.
Mastermind TMS allows our customers to bring all of these functions into a single platform, providing flexibility, visibility, control, and efficiency. Today's unprecedented global supply chain upheavals underscore how important the transportation industry is. We are building a system to allow this industry to work faster, smarter and more efficiently.
The challenges in this industry are big and exciting! We are tackling everything from fast and efficient data input to ingesting large amounts of data and applying AI to looking at blockchain to securely digitize paperwork. If you are passionate about humanizing an industry, automating in innovative ways, building for quality and scale, helping make people's lives easier and touching every part of our economy then this is the place for you.
Mastery Logistics Systems is committed to continuing to build an incredible company. We are a masterful mosaic of incredible people. We are specialists and experienced in our respective fields. We are dedicated to continuous improvement both professionally and personally. We are a collective group of really good people. We have different interests, backgrounds & talents and we work together to create really cool stuff! We believe in diversity of thought and are mindful and inclusive. We have deep respect for each other and work diligently at adding the right people to our teams.
We have flexible schedules but share in the mission that we are building and need to get it done. We offer an excellent suite of benefits.
Our team has the domain knowledge and connections to make an impact, and we're looking for experienced and thoughtful people to who thrive on creating and building great products. We want people who have a true passion for servicing and taking care of our customers. We need people who are flexible problem solvers, thrive on collaboration and consistently know how to communicate their solutions well. We are small and nimble - which is evident in how quickly we could pivot to our new reality. Each member of the team can make a tremendous impact both technically and culturally. While a start-up, we are well-funded, have an initial paying customer with which to test and launch, and are founded by top experts and veterans in the logistics industry.
Join us - you'll love it - let's build a masterpiece!
Benefits
Mastery takes great pride in providing our employees a robust and highly competitive benefit package. Our benefits include Medical, Dental and Vision insurance, company paid Life insurance for 1x salary, Legal, AD&D, Additional Life and other employee assistance benefits. We have a 401k savings plan with a 4% match. We provide opportunities for professional growth and development. We have a manage your life and schedule Paid Time Off program. We are fully devoted to finding creative perks and benefits since we cannot currently enjoy our cool office culture. Our philanthropic partner is St. Jude Children's Research Hospital.
We are an equal opportunity employer and actively seek a diverse community of professionals.