Sr Security Engineer

Job Description

This job is 100% remote

We are looking for a senior Security Engineer to work in the Security Architecture & Engineering (SEA) team at our Customer. The SAE team is responsible for architecture and Engineering aspects of all security products within Company and reports to the Global Security Office (GSO).

Roles and Responsibilities

1. Act as initial point of contact and subject matter expert for topics related to Key management and encryption.
2. Responsible for key management life cycle, documentation and participate in internal audit.
3. Support of all hardware related to HSM/Appliances to support key management.
4. Participate in deep architectural discussions with internal Business units to engineer solution when requiring HSM/Encryption.
5. Assist business leaders in understanding and implementing security solution related to key management/encryption following industry standards.
6. Provide input to security policy, standards when related to encryption and HSM.
7. Evaluate security controls to ensure effectiveness and compliance, including managing the security control remediation efforts.
8. Stay current on security industry trends, attack techniques, mitigation techniques, and security technologies by attending conferences, networking with peers, and other educational opportunities.

1. Bachelor degree or equivalent work experience – REQUIRED.
2. Experience in an information security related role.
3. Experience with security control assessments or audits.
4. Experience managing the implementation or enhancement of security controls across a diverse business.
5. Experience with Implementation of HSM solution with Thales, Safenet, Azure key vaults and AWS will be a plus.
6. Experience with PCI, Sarbanes Oxley (SOX), NIST cybersecurity framework, ISO 27000 security standards, and data protection regulations and requirements.
7. Strong problem–solving skills and written, verbal communication skills.
8. Security certification (e.g., CISSP, CEH, CISA, CISM, SECURITY+, OSCP, CCSK/CCSP).