Security Engineer - Ferretti Search
Charlotte, NC 28202
About the Job
In this critical role, you'll play a vital role in safeguarding our company's sensitive data by designing, deploying, and maintaining robust DLP solutions.
Here's what you'll do:
- Security Engineering Expert: Evaluate existing security tools and identify areas for improvement. Develop a roadmap to enhance DLP capabilities, close security gaps, and drive innovation.
- DLP Champion: Design and implement mechanisms to detect sensitive data and security incidents, ensuring compliance with security standards and procedures.
- Mentor and Leader: Share your knowledge and expertise by mentoring and developing team members to become DLP specialists.
- Security Hardening Pro: Evaluate and strengthen security tools and instrumentation to prevent cyberattacks and protect against potential exploits.
- Information Security Guardian: Collaborate with information system custodians to understand their security needs and implement best practices aligned with our information security policy.
- Auditing Ace: Assist with monitoring and auditing information system activities to ensure security policy compliance and provide regular reports to management.
- Business-Centric Security: Work with stakeholders across the organization to deliver DLP solutions that effectively support their business requirements.
- Risk Assessment Guru: Conduct security risk assessments on new and existing systems, identify vulnerabilities, and recommend appropriate security countermeasures.
- Collaboration is Key: Coordinate activities with loss prevention teams, and interact with legal and law enforcement as needed.
To be successful, you'll need:
- Subject Matter Expertise in DLP: Possess in-depth knowledge of DLP capabilities, including data discovery, tagging, classification, segregation, and loss prevention.
- DLP Mastermind: Understand DLP functionalities for data at rest, in use, and in transit.
- Hands-on DLP Experience: Have practical experience with various DLP tools, including Symantec/McAfee DLP, Tanium, Proofpoint/Mimecast/Netskope, Google Workspace, CASB, and data discovery/management solutions.
- Security-Savvy with OS: Proficient in at least one operating system (Windows, Linux, AIX, macOS, iSeries) and security concepts.
- Automation Expert: Experience with automation and orchestration for managing server and workstation infrastructure efficiently.
- Scripting Skills: Comfortable with at least one scripting/programming language (PowerShell, shell scripting, Python, etc.).
- Integration Specialist: Have experience integrating disparate systems using APIs.
- Network Security Pro: Understand DLP integration with network platforms like firewalls, UTMs, and proxies.
- Network Segmentation Wizard: Knowledgeable about network segmentation and security zones for data protection based on classification.
- Authentication Protocols: Possess a good understanding of authentication protocols like Kerberos, SAML, and OAuth.
- Knowledge Sharing Champion: Be willing to share your knowledge and assist colleagues in understanding technical and security topics.
We're also looking for someone with:
- A strong understanding of information security standards and best practices.
- Working knowledge of networking protocols, web technologies, and cloud computing.
- The ability to analyze security data and identify potential compliance issues.
- Excellent problem-solving skills and the ability to understand complex data flows for security assessment.
- A team player with a positive attitude who can build strong working relationships.
- The ability to work independently and manage multiple tasks effectively.
- Innovation, creativity, and a strong sense of urgency.
- Exceptional communication skills to explain complex security concepts to diverse audiences.
Source : Ferretti Search