Principal Security Engineer

Key
Responsibilities

Security
Monitoring - Security Tool Design and Development:

–        
Conducts
security assessments of various products and services, analyzing potential
vulnerabilities and recommending mitigation strategies.

–        
Develops
advanced testing tools and methodologies to proactively identify and address
security weaknesses.

–        
Conducts
in-depth security design and coding (e.g., reviewing code, writing code for
complex investigation), providing advanced guidance and recommendations for
improvement.

–        
Participates
in reviews of security alerts.

Event
Response:

–        
Uses
expertise to recognize and escalate complex security violations, ensuring
prompt response and resolution.

–        
Takes
appropriate action to contain and mitigate security events, coordinating with relevant
teams and stakeholders.

–        
Contributes
to post-event reviews, providing insights and recommendations for strengthening
event response processes.

Compliance:

–        
Contributes
to compliance assessments, evaluating the effectiveness of security controls
and processes.

–        
Reviews
security compliance deliverables, providing recommendations for enhancing
adherence to internal and external obligations.

–        
Ensures
compliance with internal and external obligations, collaborating with relevant
stakeholders to implement necessary measures.

–        
Ensures
inventory systems are maintained and remain compliant from a security
perspective.

Business
Continuity Support:

–        
Provides
guidance on business continuity and disaster recovery plans, processes, and
procedures, considering potential risks and vulnerabilities.

–        
Ensures
the execution of business continuity plans to support critical systems and data
during disruptions, implementing appropriate measures and controls.

–        
Assesses
readiness for certification and/or audit, providing insights and
recommendations for enhancing preparedness.

Data
Security and Privacy:

–        
Recommends
best practices and independently applies data security tools and techniques,
such as encryption, hashing, masking, and access management, to ensure the
confidentiality and integrity of sensitive information.

–        
Conducts
thorough reviews of documentation and procedures related to data security,
identifying and recommending improvements to enhance overall security posture.

Research
and Innovation:

–        
Applies
industry security knowledge through engagement in research activities and
collaboration with colleagues to contribute to the development of innovative
security solutions.

–        
Stays
updated on emerging trends and evolving threats, identifying potential
implications for the organization and recommending appropriate actions.

–        
Explores
and evaluates novel techniques and technologies to address complex security
problems.

Core
Responsibilities

Planning
& Execution:

–        
Manages
and coordinates moderately complex tasks, monitoring timelines and deliverables
to ensure timely completion and adherence to requirements for a moderately
sized project or initiative.

–        
Efficiently
delegates, monitors, and prioritizes work across multiple projects, providing
technical oversight and adjusting plans to address shifts in resources or
timelines.

Collaboration
& Partnership:

–        
Collaborates
across the organization to align on expectations and achieve shared objectives.

–        
Leverages
understanding of business leaders, stakeholders, and/or customers to ensure
proposed solutions meet their needs.

–        
Supports
inclusivity by actively seeking and listening to diverse perspectives, ensuring
others feel heard and respected.

Problem
Solving:

–        
Identifies
and addresses moderately complex issues by analyzing a wide range of data
and/or information to identify solutions in accordance with standard practices.

–        
Proactively
escalates unresolved or critical issues with a thorough assessment and suggests
potential solutions.

–        
Reviews,
contributes to, and documents problem solving strategies.

Continuous
Learning:

–        
Pursues
learning opportunities to expand knowledge and skills and/or tools in new areas
and stays abreast of the latest industry trends and best practices.

–        
Proactively
seeks and leverages ongoing feedback and training to improve skills.

–        
Coaches
and mentors junior team members, fostering continuous learning and knowledge
sharing within and across teams.

Continuous
Improvement:

–        
Develops
ideas, recommends updates, and/or collaborates on the implementation of process
improvements to increase the efficiency and effectiveness of processes,
protocols, and workflows across teams, and evaluates the impact on key
stakeholders.

–        
Solicits
feedback from others on ideas for alternative approaches and methods for
continued improvement.

Performance
and Development:

–        
Contributes
to the talent development pipeline by participating in candidate interviews,
assessing candidates, and providing hiring recommendations.