Security Engineer

Skills & Qualifications:

• University degree in Computer Science or related field
• CISSP designation or equivalent preferred
• Strong understanding of PCI-DSS, PA-DSS, and SSAE/SOC compliance
• Strong knowledge of OWASP Top-10 and protective coding practices.
• 10+ years development experience
• 5+ years security focus
• Experience working with the Windows Server platform (IIS, Active Directory, Exchange)
• Extensive experience in leading architecture designs, and solutions focusing on security.
• Demonstrate the ability to manage and prioritize multiple projects
• Experience with Virtualized environments and management best practices: experience in Amazon EC2 and ESX-VMware required
• Experience with the deployment of enterprise web-based transactional applications
• Proven ability to meet deadlines, prioritize tasks and work effectively with minimal supervision in a team environment
• Strong analytical and problem solving skills
• Strong leadership, interpersonal and communication skills (verbal and written with both technical and non-technical staff)
• Motivated, hardworking and flexible
• Quick learner who enjoys a challenge and can see the big picture

Responsibilities

• Ownership of software development security practices
• Ownership of SaaS hosting security practices
• Compliance owner for PCI-DSS, PA-DSS certifications
• Training/Mentoring staff on Security best practices
• Governance role as company security officer.
• IT security lead
• Ensure communications traversing internal and public networks follow best practices to maintain network security
• Maintain documentation, establish and manage periodic vulnerability scans, maintain audit readiness and provide audit documents for compliance programs (e.g. PCI) as required
• Implement and perform network and instance monitoring for security events and follow appropriate remediation tasks in the case of an identified fault.
• Participate in the project planning process including estimating and process improvements;
• Evaluate new technologies and evaluating how they could be integrated / utilized to better serve our clients (internal and external)
• Strive at all times to do work using best practices – through experience or experimentation