Senior AWS Security Engineer
United States
Applications have closed
Business Wire
Explore Business Wire for premium press release & newswire distribution services, offering global reach and tailored solutions for businesses worldwide. Expand your reach today.Organizations, large and small, depend on us to accurately publicize market-moving news and multimedia, and generate social engagements that develop interactions with their target audiences.
About the RoleAs Senior AWS Security Engineer, you will be a leading member of the security operations and analyst staff for Business Wire, inspiring fellow security analysts and IT colleagues to improve Business Wire’s security posture by demonstrating a passion for cybersecurity, an aptitude for discovering and remediating security threats, and a hands-on, roll-up-your-sleeves approach. You will be an integral part of Business Wire’s cybersecurity transformation – working to build robust and repeatable monitoring and orchestration solutions and processes to secure Business Wire’s cloud (AWS) infrastructure while supporting traditional security solutions through our transition from datacenter to cloud.
You will work closely with technology teams and other members of the IT Security team to actively prioritize day-to-day operational activities, identify, and remediate threats, and address ongoing threats and/or incidents in a shared responsibility model. The successful candidate will demonstrate a bias toward action and a willingness to dive deep into potential issues as they arise. Responsibilities include operational aspects of monitoring and remediating security events/threats in Business Wire’s cloud (AWS) and on-premise environments, creating and cultivating practical security operations practices, and mentoring security colleagues as it relates to analyst best practices and developing practical security expertise.
What You'll Do
- Perform day-to-day monitoring and support of security infrastructure, tools, and systems, including but not limited to threat detection, IDS/IPS, SIEM, Anti-Malware, DLP, and other monitoring tools.
- Develop an application security framework that provides the next-generation protections required to defend Business Wire and its clients from current and emerging threats.
- Design security solutions for multiple application platforms and frameworks.
- Conduct security assessments for web, vendor, and partner applications.
- Lead efforts to enhance continuous monitoring capabilities in cloud and datacenter environments.
- Review security metrics and telemetry to identify risks, security threats, or configuration errors.
- Act as mentor and escalation point for junior security analysts providing next-level support on security issues and guidelines for developers, desktop-support specialists, and system administrators.
- Quickly respond to security issues and other IT incidents. Assist with security incident response and forensic investigations as necessary.
- Provide scheduled “on-call” support as part of an “on-call” rotation schedule.
- Other tasks as assigned.
What You'll Need
- Bachelor’s degree in Computer Science, Information Systems, Computer Engineering, Cybersecurity, Systems Analysis, or a related field or equivalent work experience.
- At least 4 years of hands-on AWS security experience.
- Infrastructure as code (IaC) - CloudFormation, Terraform, Git.
- Container technologies - ECS, EKS, Fargate, Docker.
- Industry-recognized professional certification(s) such as CISSP, AWS Security Specialty, etc.
- Ability to work on highly complex projects that require in-depth knowledge within multiple IT architecture and security domains.
- Strong knowledge of a wide variety of information security architectures, concepts, and techniques, as well as supporting security tools.
- Ability to communicate effectively in high-pressure situations.
- Knowledge of malware analysis tactics and techniques.
- Experience reviewing and analyzing network packet captures.
- Experience performing security/vulnerability reviews of network, server, and endpoint environments.
- Understanding of attack surface reviews and multi-layer defense systems to prevent exploits, detect and intercept attacks, and discover threat agents.
- Experience with web application testing tools for DAST, SAST, and IAST analysis. At this time, Business Wire will not sponsor a new applicant for employment authorization for this position.
- Ability to work remotely 100%
- Excellent health benefits that begin on your first day of employment
- $100 monthly fitness allotment, a tuition reimbursement program, and enhanced mental health resources
- 401(k) plan with generous company match, and annual profit sharing contribution (subject to company performance)
- PTO, Floating Holidays, Wellness Day Off, Birthday Day Off, and more!
What We OfferThe base salary range for this position is $150K to $180K/year. Offered salary will be determined by several factors, including but not limited to: applicant’s education, experience, knowledge, skills and abilities, as well as internal equity and alignment with geographic market data. Business Wire reserves the right to modify this salary range at any time. Business Wire’s total rewards include:
Tags: Application security AWS CISSP Cloud Computer Science DAST Docker Exploits IAST IDS Incident response IPS Malware Monitoring SAST Security assessment SIEM Terraform Threat detection Web application testing
Perks/benefits: 401(k) matching Equity Fitness / gym Flex vacation Health care Team events Wellness
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Staff Security Engineer jobs
- Open Information Security Specialist jobs
- Open Senior Security Analyst jobs
- Open Security Operations Engineer jobs
- Open Senior Cyber Security Engineer jobs
- Open Cyber Security Architect jobs
- Open Senior Information Security Analyst jobs
- Open Product Security Engineer jobs
- Open Cyber Security Specialist jobs
- Open Cybersecurity Analyst jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Principal Security Engineer jobs
- Open Cybersecurity Consultant jobs
- Open Senior Information Security Engineer jobs
- Open Consultant SOC / CERT H/F jobs
- Open IT Security Analyst jobs
- Open Cybersecurity Specialist jobs
- Open Security Specialist jobs
- Open Security Researcher jobs
- Open Chief Information Security Officer jobs
- Open Senior Penetration Tester jobs
- Open Senior Security Architect jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Senior Cyber Security Specialist jobs
- Open IT Security Engineer jobs
- Open Agile-related jobs
- Open ISO 27001-related jobs
- Open Application security-related jobs
- Open Windows-related jobs
- Open Network security-related jobs
- Open Pentesting-related jobs
- Open CISM-related jobs
- Open Vulnerability management-related jobs
- Open GCP-related jobs
- Open Analytics-related jobs
- Open SaaS-related jobs
- Open IAM-related jobs
- Open Threat intelligence-related jobs
- Open CISA-related jobs
- Open Security assessment-related jobs
- Open DevOps-related jobs
- Open Java-related jobs
- Open Kubernetes-related jobs
- Open EDR-related jobs
- Open Security Clearance-related jobs
- Open Malware-related jobs
- Open APIs-related jobs
- Open IDS-related jobs
- Open CEH-related jobs
- Open CI/CD-related jobs