Systems and Infrastructure Engineer III, Information Security - job 1 of 3

As a Systems and Infrastructure Engineer III in Information Security at Walmart, your primary responsibilities include creating, tuning, and enforcing Web Application Firewall (WAF) policies, managing unwanted scripted traffic, and enhancing our client-side evaluation capabilities. You'll also assess protection strategies during active cyber-attacks, collaborate with network and site reliability teams, and build security infrastructure to ensure secure digital access.

To qualify for the Systems and Infrastructure Engineer III position at Walmart, candidates should have a Bachelor's degree in computer science, information technology, or a related field along with two years of experience in systems and infrastructure engineering, or alternatively, four years of relevant experience. Additional security certifications like Security+, CISSP, or CCSP, and a Master’s degree are preferred.

Walmart actively supports the professional growth of its Systems and Infrastructure Engineer III by offering the Live Better U program, which covers tuition for a wide range of education, from high school completion to degrees. This initiative is designed to assist employees in advancing their careers within the company.

Key skills for a successful Systems and Infrastructure Engineer III at Walmart include hands-on experience with WAF management, strong knowledge of web protocols like TCP/IP and HTTPS, and proficiency in scripting languages. A deep understanding of client-side fingerprinting, as well as analytic and problem-solving skills, are essential for tackling security challenges effectively.

Walmart offers a comprehensive benefits package to Systems and Infrastructure Engineer III employees, including medical, vision, and dental coverage, a 401(k) plan with company contributions, performance-based bonuses, paid time off for various purposes, and support for education through the Live Better U program.

In my previous roles, I have managed and tuned Web Application Firewalls extensively. I focused on creating policies that adapt to evolving threats while ensuring seamless access for users. My process involves assessing attack trends, monitoring logs for unusual activity, and regularly updating rules based on analytical data.

When handling security incidents, my approach is systematic. I typically assess the vulnerability, collaborate with the incident response team to mitigate immediate threats, analyze the attack for future prevention, and document findings for continuous improvement. Communication is key during this process.

I'm proficient in Python and Bash, utilizing them for automating security monitoring tasks, manipulating log files, and enhancing incident response workflows. This has allowed me to focus on higher-level security strategies while ensuring that routine tasks are efficiently managed.

One challenge was mitigating a sophisticated DDoS attack targeting our eCommerce site. I collaborated with the network team to deploy additional load balancers, fine-tuned our WAF rules, and engaged with external providers for threat intelligence. By monitoring traffic patterns closely, we successfully deflected the attack.

I have experience using Splunk and Kibana for log management. I utilize these tools to aggregate data from various sources, correlate events in real-time, and create dashboards to monitor potential security incidents efficiently. This proactive overview helps identify patterns and anomalies more quickly.

I regularly participate in webinars, engage in forums, and read industry-relevant publications to stay updated. Additionally, I am part of professional security groups, which allows me to share knowledge and learn about emerging threats and effective mitigations from peers.

Client-side fingerprinting is crucial for identifying users based on their browser settings and behaviors. This technique helps in preventing fraudulent activities and enhances user authentication processes. I use the data from fingerprinting to adapt our security measures proactively.

The most critical component of web application security is ensuring that all access points are secured, including user authentication and data validation. It’s essential to implement a layered security approach, including firewalls, WAFs, and continuous monitoring to safeguard digital assets effectively.

Collaboration with site reliability and network teams is integral. I initiate regular meetings to discuss security protocols, share insights on potential threats, and develop joint strategies for securing ingress points. Building strong inter-team relationships fosters a cohesive approach to security.

My motivation stems from the challenge and impact of securing digital environments in an ever-evolving threat landscape. I find satisfaction in protecting users and organizations from malicious activities while constantly learning and adapting to new technologies and techniques.