Insider Threat DevOps III
Columbus, Georgia, USA
Global Payments
Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services. Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results. We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions. Join our dynamic team and make your mark on the payments technology landscape of tomorrow.
Description
Identify current Insider Tactics, Techniques, Procedures (TTP) by working with investigators, analysts, and available data to develop capabilities for detection and prevention. This role will drive the Insider Threat Program by assuring data efficacy, creating high fidelity alerting, and providing tooling for Insider Threat Analysts. All capability development will follow internal agile/scrum/flex practices and leverage existing CI/CD infrastructure to achieve scalability and robustness for the Insider Threat Program.
Minimum Qualifications:
3-5 years of DevOp or DevSecOP Experience, 1-2 year of experience doing capability development for cyber security or insider threat
Oversee design, development, maintenance and support of our pipelines, which support our Continuous Integration and Deployment of Insider related Capabilities for Detection and prevention
Perform Threat-modeling & risk analysis based on direct interaction with investigators, analysts, and available data for all business segments
Provide training and assistance with playbook development for emerging threats and their related detections
Work with stakeholders to define and drive continuous improvements in policies, procedures, and technical controls related to the Insider Threat Program
Experience with User and Entity Behavior Analytics (UEBA), Security Information Event Management (SIEM), and Data Loss Prevention (DLP) principles
Knowledge of NIST Cyber Security Framework, computer forensics, incident response, threat-informed defense approaches, the MITRE ATT&CK framework, and cyber security principles.
Experience with scripting languages like Python
Experience with infrastructure as code languages like Terraform
Preferred Qualifications:
3-5 years of DevOp or DevSecOP Experience, 2-3 year of experience doing capability development for cyber security or insider threat, law enforcement background preferred
Oversee design, development, maintenance and support of our pipelines, which support our Continuous Integration and Deployment of Insider related Capabilities for Detection and prevention
Perform Threat-modeling & risk analysis based on direct interaction with investigators, analysts, and available data for all business segments
Provide training and assistance with playbook development for emerging threats and their related detections
Subject Matter Expert in infrastructure, development, operations, security and quality assurance, with proven experience with DevOps and Agile practices.
Work with stakeholders to define and drive continuous improvements in policies, procedures, and technical controls related to the Insider Threat Program
Experience with User and Entity Behavior Analytics (UEBA), Security Information Event Management (SIEM), and Data Loss Prevention (DLP) principles
Knowledge of computer forensics, incident response, threat-informed defense approaches, the MITRE ATT&CK framework, and cyber security principles.
Experience with security technologies, such as EDR, DLP, CASB, UEBA, SIEM, IPS/IDS, PAM
Experience with cross cutting technology stacks that include both on-prem(VMware) and cloud resources (AWS, GCP, AZURE, Oracle Cloud)
Certifications- CERT ITPM, GCFA, CFCE, CFI, CFSR, or Similar Credentials
GCP, AWS, and Azure Professional Experience with certification
Experience with scripting languages like Python, Perl, Bash, or Powershell
Experience with infrastructure as code languages like Terraform, Ansible, Puppet
Experience making remediation recommendations based on industry practice surrounding PCI, SOX, PHI, PII, GDPR, GLBA, and NIST CyberSecurity Framework
Desired Skills & Capabilities:
- Track record of acting with integrity, taking pride in work, seeking to excel, and being curious and flexible
- Strong agile development background with experience supporting cyber security or insider threat operations
- Excellent judgment and the ability to make quick decisions when working with complex situations
- AWS Experience in an IaC environment,
- CI/CD GitOps experience (Jenkins, Terraform)
- Understand insider tactics, techniques and procedures(TTP) to aid in discovery and analysis
- High degree of integrity, trustworthiness and confidence; represents the company and its management team with the highest level of professionalism.
- Performing data analysis to discover insider TTP reactively to alerting
- Insider Threat Program Management and Development based on evolving threats and business operating environments
- Conduct proactive data discovery for new trends among possible insider threat actors
- Developing Detections and Alertings for Insider Activity across SIEM and UEBA Controls
- Developing capabilities across complex technology stacks consisting of a blend of components ranging from IAAS, PAAS, FAAS, SAAS across multiple cloud providers
- Proficient use of scripting with one or more programming language including Python, PowerShell, JavaScript and Bash.
- Proficient use of scripting with one or more programming infrastructure as a code languages including Terraform, Kubernete Manifests, Anseble, Puppet
Global Payments Inc. is an equal opportunity employer.
Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. Those applicants requiring reasonable accommodation to the application and/or interview process should notify a representative of the Human Resources Department.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Agile Analytics Ansible AWS Azure Bash CASB CERT CFCE CI/CD Cloud DevOps EDR Forensics GCFA GCP GDPR GLBA IaaS IDS Incident response IPS JavaScript MITRE ATT&CK NIST Oracle PaaS Perl PowerShell Puppet Python Risk analysis SaaS Scripting Scrum SIEM SOX Terraform VMware
Perks/benefits: Career development Flex hours
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Information Security Specialist jobs
- Open Senior Cyber Security Engineer jobs
- Open Ethical hacker / Pentester H/F jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Principal Security Engineer jobs
- Open Cyber Security Architect jobs
- Open Manager Pentest H/F jobs
- Open Product Security Engineer jobs
- Open Staff Security Engineer jobs
- Open Cyber Security Specialist jobs
- Open Cybersecurity Analyst jobs
- Open Senior Information Security Analyst jobs
- Open Chief Information Security Officer jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open IT Security Analyst jobs
- Open Cybersecurity Consultant jobs
- Open Consultant SOC / CERT H/F jobs
- Open Senior Information Security Engineer jobs
- Open Security Specialist jobs
- Open Senior Penetration Tester jobs
- Open Senior Security Architect jobs
- Open Cybersecurity Specialist jobs
- Open Security Researcher jobs
- Open IT Security Engineer jobs
- Open Security Operations Analyst jobs
- Open CISM-related jobs
- Open Windows-related jobs
- Open Network security-related jobs
- Open ISO 27001-related jobs
- Open Pentesting-related jobs
- Open Application security-related jobs
- Open Agile-related jobs
- Open GCP-related jobs
- Open Vulnerability management-related jobs
- Open SaaS-related jobs
- Open CISA-related jobs
- Open Analytics-related jobs
- Open IAM-related jobs
- Open Threat intelligence-related jobs
- Open APIs-related jobs
- Open Security assessment-related jobs
- Open Java-related jobs
- Open Malware-related jobs
- Open DevOps-related jobs
- Open Security Clearance-related jobs
- Open IDS-related jobs
- Open Forensics-related jobs
- Open CEH-related jobs
- Open EDR-related jobs
- Open Kubernetes-related jobs