Security Engineer

The Security Engineer will collaborate with teams to design fine-grained technical controls around access to sensitive datasets and ensure their compliance with the regulatory requirements while providing strong technical support, enabling technical decisions to be made with confidence and at pace.This role generally works a standard business week, but occasional weekend work / out of hours may be required.Responsibilities

Carry out Host-Based Vulnerability AssessmentsDrive the remediation of identified vulnerabilities across multiple departments.Responsible for monitoring and responding to alertsSupport incident response in case of a security breachSupport and continuously enhance our existing security services for CloudCollaborate across multiple teams to remove blockers to drive forward implementationWork with internal and external support teamsEducation and/or Experience

College degree or equivalent work experience7-10 years in Information Technology, with a comprehensive Security Operational backgroundExperience with security frameworks (NIST, MITRE, CIS, ISO & SOC2)Hands-on experience with the configuration of cloud technologiesKnowledge, Skills and Abilities

Extensive knowledge of cloud operations and automationExtensive knowledge of key security practices in access control, application security, network security, and security strategyKnowledge of regulatory data requirements in the cloud, aligned with HIPAA, GDPR or other compliance standardsBasic understanding of containerization technologyHave a strong knowledge of privileged access management, vulnerability management, and threat intelligenceBuild multilayer working relationships with both technical and business stakeholders, gaining their respect and trust based on your knowledge and professionalismStrong root cause analysis, problem-solving, and analytical skillsExcellent communication and analytical skills for incident and problem management as well as stakeholder managementAbility to effectively document operational process and proceduresTechnical Skills

Basic understanding of DevOps tools (GitHub, Jenkins, Nexus, Ansible, etc.)Basic understanding of SecOps tools (Rapid 7, Cloud Conformity, SUMO Logic, etc.)Excellent understanding of Amazon Web Services (AWS) the AWS shared responsibility model, KMS, CloudTrail, CloudWatch, CloudFormation, Lambda and GuardDutyExtensive knowledge of SIEM and SOAR toolingProficient in Linux, Node.js, YAML and JSONLanguage Skills

Ability to speak the English language proficiently, both verbally and in writing.Travel Requirements

This position may require up to 10% travel based on business need.Work Requirements

Compliance with all relevant FINEOS Global policies and procedures related to Quality, Security, Safety, Business Continuity, and Environmental systems.Travel and fieldwork, including international travel may be required. Therefore, employee must possess, or be able to acquire a valid passport.Must be legally eligible to work in the country in which you are hired.FINEOS is an Equal Opportunity Employer. FINEOS does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.

#J-18808-Ljbffr