Engineering - Dallas - Associate, Security Engineering - 10427724

Associate, Security Engineering role based in Dallas, Texas.

Responsibilities

• Perform security assessments of business-initiated projects to drive adoption of application and infrastructure security controls and best practices.
• Ensure security and privacy by design, including design process improvements, assessment of controls, data models, cryptographic implementation, and compliance and regulatory needs.
• Collaborate with technical teams on major technology initiatives to ensure security is integrated at the outset of a design or project.
• Advise on leading-edge engineering to protect the firm’s network from security risks related to client/server architectures, cloud architectures, web services, and mobile applications.
• Conduct risk reviews of third-party system integrations against firm policies and standards.
• Drive implementation of security controls in various platforms by working with technology infrastructure teams.
• Collaborate with the global team to continually operate and improve a world-class cyber program by providing input into the uplift of sensory tools, detection tuning, and access to data sources to increase detection effectiveness.
• Convey complicated technical analyses via comprehensive presentations.
• Communicate status and risks in a succinct, direct, and open manner for proper issue management lifecycle tracking.
• Review security controls and how they apply to different designs and systems to identify security gaps.
• Highlight and articulate risk to developers or engineers.
• Verify reports related to application vulnerability assessment and penetration testing of web applications.
• Perform architecture reviews of web applications.

Requirements

• Master’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering, or a related field such as Cyber Security, Technology, and Policy, and one (1) year of experience in the job offered or a related Security Engineering role.
• Alternatively, a Bachelor’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering, or a related field such as Cyber Security, Technology, and Policy, and three (3) years of experience in the job offered or a related Security Engineering role.
• Prior work experience must include:
  • Technical understanding of both application and infrastructure architecture and security (on-premise and cloud).
  • Working with application security best practices including OWASP and CWE.
  • Working with application security vulnerabilities and controls to remediate risks.
  • Assessing and mitigating software security threat vectors, threat modeling, attack surface analysis, security design reviews, penetration testing, or vulnerability assessments.
  • Working in a shift-left environment to help embed security in the design phase to implement security controls within system architecture.
  • Conducting infrastructure or application security risk assessments.