Cybersecurity Engineer II - AD/Entra ID (REMOTE)

As a Cybersecurity Engineer II at DICK'S Sporting Goods, your main responsibilities involve supporting enterprise Identity & Access Management solutions, with a focus on Active Directory and Microsoft Entra ID. You will manage access requests, develop and implement access control frameworks, and ensure compliance with security governance policies.

Candidates for the Cybersecurity Engineer II position at DICK'S Sporting Goods should have at least 3 years of relevant experience in security operations, a solid understanding of IAM principles, and knowledge of technologies such as Azure Active Directory. A bachelor’s degree in computer science or a related field is preferred.

In the Cybersecurity Engineer II role at DICK'S Sporting Goods, you will maintain security governance by developing and reviewing access management policies, and responding to audits. Your work is crucial in ensuring that the organization adheres to required security standards and successfully passes audits.

Ideal candidates for the Cybersecurity Engineer II role will have experience with Azure Active Directory, IAM tools, PowerShell, and Python. Knowledge of security best practices, application security, and familiarity with systems logging mechanisms will also be beneficial.

While not mandatory, having security certifications like Security+ or related Azure/Entra IAM certifications is preferred for the Cybersecurity Engineer II position at DICK'S Sporting Goods, as they demonstrate your commitment to the field and enhance your qualifications.

In answering this question, focus on specific projects or tasks where you utilized Azure Active Directory. Highlight your experience with user management, access policies, and IAM integrations, illustrating how your understanding of its features has contributed to effective security solutions.

Discuss frameworks like RBAC or ABAC that you've implemented in previous roles. Emphasize your understanding of how these strategies help in creating secure access models and maintaining compliance with security governance.

Highlight your experience in preparing for audits by ensuring governance policies are up to date. Talk about the steps you take, such as documentation, system checks, and collaboration with auditing teams to ensure a smooth process.

Explain your incident response protocol, including steps like detection, containment, eradication, and recovery. Providing an example of an incident you managed effectively can showcase your practical experience.

Discuss resources such as cybersecurity training, webinars, forums, or certifications you pursue to continuously update your skills. Share any networks you engage with to stay informed on emerging threats and technologies.

Detail your experience with languages like PowerShell or Python. Discuss specific scripts you've created for automation or reporting and how these have improved security practices or operational efficiency.

Illustrate your understanding of creating and enforcing security policies, and share experiences where you successfully updated policies or ensured policies aligned with compliance requirements.

Identify a challenge such as integrating new technologies or managing user access requests. Share your problem-solving approach and how it resulted in improved IAM practices within your organization.

Keep your answer up to date with trends like Zero Trust Architecture or AI in cybersecurity. Explain why these trends are crucial for entities like DICK'S Sporting Goods and how they can enhance security measures.

Describe your experience collaborating with teams across different technology disciplines. Highlight communication strategies, cultivating relationships, and sharing knowledge that have worked well in achieving common security goals.