Sr. Security Engineer

What you'll do

As a Senior Security Engineer at KIND, you will be responsible for leading and executing the design, implementation, and management of our comprehensive security initiatives. Your expertise will be instrumental in identifying potential vulnerabilities and mitigating risks while constantly staying ahead of emerging security threats. You will collaborate with cross-functional teams to design and implement robust security measures and ensure the confidentiality, integrity, and availability of our systems and data. You should be able to operate independently with minimum supervision and provide thought and functional leadership to this role. And this is how you'll do it...

• Security Infrastructure Management:
  • Design, implement, and manage security infrastructure, including firewalls, intrusion detection/prevention systems, antivirus solutions, and encryption technologies.
  • Oversee the configuration and optimization of security tools to ensure optimal performance and minimal impact on operational efficiency.
  • Vulnerability Assessment and Penetration Testing:
  • Conduct regular vulnerability assessments and penetration tests to identify and address potential security weaknesses in our systems and applications.
  • Develop and track remediation plans for identified vulnerabilities, working closely with relevant teams.
  • Incident Response and Security Monitoring:
  • Lead incident response efforts to promptly detect, investigate, and mitigate security incidents and breaches.
  • Monitor security alerts and logs, responding to potential threats promptly and effectively.
• Security Policies and Compliance:
  • Develop, update, and enforce security policies, procedures, and standards aligned with industry best practices and compliance requirements.
  • Collaborate with internal teams to ensure adherence to security policies and standards.
  • Research and Industry Knowledge:
  • Stay up-to-date with the latest security trends, technologies, and threats to proactively enhance our security posture.
  • Share knowledge and insights with the team and contribute to the continuous improvement of security practices.
• Security Audits and Assessments:
  • Coordinate and participate in internal and external security audits and assessments.
  • Collaborate with auditors to address findings and implement necessary improvements.

You have...

• Bachelor's degree in Computer Science, Information Security, or a related field. A master's degree is a plus.
• Proven experience of 2-3 years as a Security Engineer or in a similar security-focused role.
• In-depth knowledge of security frameworks, protocols, and standards (e.g., ISO 27001, NIST, CIS).
• Strong experience with security tools and technologies, such as SIEM, IDS/IPS, DLP, WAF, etc.
• Hands-on experience with cloud security (AWS, Azure, or Google Cloud) is preferred.
• Proficiency in conducting vulnerability assessments and penetration tests using various tools.
• Familiarity with scripting and programming languages (e.g., Python, PowerShell) for automation and security tool customization.
• Excellent analytical, problem-solving, and communication skills.
• Demonstrated leadership abilities and the ability to collaborate effectively with cross-functional teams.
• Familiar with major vendors like but not limited to CrowdStrike, Cisco, PaloAlto, McAfee ePo, Azure Information security

Pluses

• Certifications in any of the following areas: Offensive Security Certified Professional/Expert (OSCP/OSCE) ,CISSP, CCIE, LPT, ITIL, Cobit
• Experience with Wireshark and Snort platforms, including regex knowledge
• Extensive experience configuring and managing log management and SIEM solutions
• Advanced knowledge of Nessus, Metasploit, and Kali Linux, Rapid 7
• Experience reviewing source code for security flaws and conducting web application security assessments
• Experience with LDAP Authentication and Identity Access Management

The salary range for this role is $130,000 - 155,000 per year. Please state your salary expectations in your application. KIND intends to offer the selected candidate base pay within this range, dependent on job-related, non-discriminatory factors such as experience. Base pay is one part of the total rewards that KIND provides to compensate and recognize employees for their work. KIND provides a robust benefits package to help support you physically, financially, and emotionally through the big milestones and in your everyday life.