Sr. Security Engineer

Position Overview

As a Sr. Security Engineer at Applied Systems, you will join the Office of Information Security (OIS) team, working closely with various engineering teams, product managers, quality assurance, and third-party groups to ensure the security of Applied products. Your role involves identifying and mitigating security issues, vulnerabilities, and misconfigurations by leveraging deep knowledge of development, infrastructure, and cloud providers. You will collaborate with Threat Response and Governance, Risk and Compliance teams to proactively share findings. Successful candidates thrive in high-stress environments, possess both attacker and defender mindsets, mentor junior engineers, and contribute to proactive security measures to safeguard Applied and user data.

What You’ll Do

• Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to Applied’s cloud, datacenter, and Kubernetes infrastructure.
• Implement new, and update existing security measures for the protection of Applied’s infrastructure.
• Contribute to the operationalization of Security platforms at Applied.
• Participate in the Security Incident Response Team on-call rotation.
• Assist with the development of project plans and process documentation.
• Contribute to the creation of product deployment roadmaps.
• Participate in proof-of-concept buildouts for information security.
• Contribute to creation of runbooks.
• Contribute to the production and tuning of detection rules.
• Performs other duties as assigned by immediate manager or management team.

We’re Looking for Someone Who:

Can work remotely or from an Applied Systems office.

Your experience should include some or all of the following:

• Bachelor's Degree in computer science, technology, or equivalent work experience.
• A minimum of 3 years' experience working in one of the following: site-reliability engineering, security engineering, DevSecOps, or system engineering.
• Advanced knowledge of the Linux and/or Windows operating systems.
• Experience with Google Cloud Platform (preferred) or Amazon Web Services.
• Experience with Kubernetes.
• Experience with one or more scripting languages, PowerShell, Python, Bash, etc.
• Experience with orchestration technologies such as Ansible, or S.O.A.R. platforms.
• Experience with infrastructure-as-code technologies such as Terraform or Ansible.
• Working knowledge of traditional networking and software-defined networking concepts.
• Experience with two of the following technologies: CWPP/CSPM, CASB/SASE, Attack Surface Management, PAM, Unified Data Governance tooling (e.g., DLP), WAF, SWG, Zero Trust Network Access.
• Demonstrated experience with running systems at scale.

Key skills/competency

• Cloud Security
• Kubernetes Security
• Vulnerability Management
• Incident Response
• DevSecOps
• Infrastructure as Code
• Linux/Windows OS
• Scripting (Python, Bash)
• GCP/AWS
• Network Security