Jobs · Information Technology · Texas

Sr Security Engineer

Michaels Stores · Irving, TX · 2 wk ago
Information TechnologyFull-time
We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. No job title heading. No metadata like Job ID. Remove boilerplate: EEO, legal, etc. Also remove navigation, cookie, etc. We need to preserve substantive info. Let's parse the posting. First line: "Support Center - Irving As a Sr Security Engineer, you will work on complex technical security solutions across multiple technology stacks. You work closely with development, DevOps, and infrastructure team members to build best in class security practices." That's about the role. Then "Major Activities" list: Analyzes complex security issues (e.g security events, threat models, etc) Responsible to monitor, operate, configure, remediate multiple security tool (e.g firewalls, anti-malware) Help to implement security processes/standards, for example Michaels Secure Coding Standard Use tooling architecture and develop hands-on Security Automation that integrates with various DevOps/DevSecOps tools Enhanced speed with security functions Responsible to independently security controls, tools and monitoring Leverage internal and external partnerships and networks to maximize the achievement of business goals Execute systems strategies to support business goals Resolves cross-functional issues Other Duties As Assigned These are responsibilities. Then "Minimum Education Bachelor’s degree in Computer Science, Information Security, or STEM related field of study" "Minimum Type Of Experience The Job Requires 5+ years of experience in security engineering Experience multiple security component (e.g. firewall and IPS) Competency with complete security stack with in discipline (elgl network security) Good knowledge of network security?) Good knowledge of incorporating secure coding into application development and DevOps practices Prior experience with managing application security training programs Experience with operations and security with GCP or AWS, Containers, and Serverless technologies Established experience with Agile (including Scrum and Kanban) and software development lifecycle (SDLC) practices. Experience with web development languages (Java, Python, JavaScript, etc.) Ability to navigate a rapidly changing landscape, while handling multiple responsibilities Curious about new technology and always looking to acquire new knowledge Excellent verbal and written communication skills Be an action-oriented, independent, self-starter comfortable working in an unstructured, fast-paced environment" Then "Preferred Special Certifications Or Technical Skills CISSP, CISM, CCNP, OSCP, GIAC, etc. Cloud Solution Architects Certification preferred" "Preferred Type Of Experience The Job Requires Experience with Windows and *nix operating systems, endpoint applications, networking protocols and devices. Experience single sign-on (SSO), OAuth 2.0, OpenID Connect and SAML. Ability to effectively communicate business risk from cybersecurity topics. Active involvement with practices emerging from OWASP, NIST and SANS, among others." Then "Applicants in the U.S. must satisfy federal, state, and local legal requirements of the job." That's legal boilerplate; we can drop. Then company description: "At The Michaels Companies Inc., our purpose is to fuel the joy of creativity and celebration. As the leading destination for creating and celebrating in North America, we operate over 1,300 stores in 49 states and Canada and online at Michaels.com and Michaels.ca. The Michaels Companies, Inc. also owns Artistree, a manufacturer of custom and specialty framing merchandise. Founded in 1973 and headquartered in Irving, Texas, Michaels is the best place for all things creative. For more information, please visit www.michaels.com." That's about the company; could be part of About the role or maybe separate "About the company". But we only have allowed headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We could put company description under About the role (maybe as part of role description). Or we could treat as part of About the role. Then benefits: "Michaels offers a range of benefits to support team members and their families. Depending on position and eligibility, team members may have access to a 401(k) with employer match, an Employee Assistance Program, medical, dental, and vision coverage, telemedicine services, flexible spending accounts, commuter benefits, tuition assistance, adoption assistance, and various voluntary insurance options. All team members enjoy everyday perks such as employee discounts and access to partner discount programs. For a summary of benefits, visit the Michaels Benefits at a Glance page. For additional information regarding benefits, visit MIKBenefits.com" That's benefits content. Pay and Schedule: Not mentioned. So we should NOT include Pay or Schedule sections. We need to avoid placeholders like "commensurate with experience" etc. Not present. We need to output HTML fragment only. Structure: Use

for section headings. Use
  • for any list of duties/requirements/benefits. Use

    for prose. We need to decide which sections to include: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits. We have content for each. About the role: combine the initial description plus maybe company description? The initial description: "As a Sr Security Engineer, you will work on complex technical security solutions across multiple technology stacks. You work closely with development, DevOps, and infrastructure team members to build best in class security practices." Also maybe include the company description? Could be part of About the role. We'll include that as prose. Responsibilities: list of major activities. We'll put each as

  • . Requirements: Minimum Education and Minimum Type Of Experience (the required experience). Could be combined under Requirements. We'll list education as
  • maybe? Or we can have

    for education and then

      for experience items. But rule: Use
      • for any list of duties/requirements/benefits. So for requirements we can list each bullet as
      • . Education could be a bullet. Qualifications: maybe Preferred Special Certifications Or Technical Skills and Preferred Type Of Experience. Those are preferred qualifications. We'll put under Qualifications. Skills: maybe we could separate technical skills? But we already have qualifications covering certifications and preferred experience. Could also have Skills section for things like "Excellent verbal and written communication skills", "Ability to navigate...", "Curious about new technology", etc. Those are more like competencies. Could be under Skills. But we already have many items under Requirements and Qualifications. To avoid duplication, we need to decide categorization. We have: - Minimum Education: Bachelor's degree in Computer Science, Information Security, or STEM related field. - Minimum Experience: 5+ years security engineering; experience with multiple security component (firewall and IPS); competency with complete security stack (network security); good knowledge of incorporating secure coding into application development and DevOps practices; prior experience managing application security training programs; experience with operations and security with GCP or AWS, Containers, Serverless; established experience with Agile (Scrum/Kanban) and SDLC; experience with web dev languages (Java, Python, JavaScript, etc.); ability to navigate rapidly changing landscape while handling multiple responsibilities; curious about new tech; excellent verbal/written communication; action-oriented independent self-starter comfortable in unstructured fast-paced. - Preferred Certifications: CISSP, CISM, CCNP, OSCP, GIAC, etc.; Cloud Solution Architects Certification preferred. - Preferred Experience: Experience with Windows and *nix OS, endpoint apps, networking protocols and devices; experience with SSO, OAuth 2.0, OpenID Connect, SAML; ability to effectively communicate business risk from cybersecurity topics; active involvement with practices emerging from OWASP, NIST, SANS. We could treat the "Minimum Experience" as Requirements, and the "Preferred Certifications" and "Preferred Experience" as Qualifications. Skills could be things like communication, curiosity, etc. But those are already in Minimum Experience list. Could move them to Skills. Better: Requirements: Education + Minimum Experience (hard requirements). Qualifications: Preferred Certifications + Preferred Experience. Skills: maybe we could list "Excellent verbal and written communication skills", "Ability to navigate a rapidly changing landscape, while handling multiple responsibilities", "Curious about new technology and always looking to acquire new knowledge", "Be an action-oriented, independent, self-starter comfortable working in an unstructured, fast-paced environment". Those are soft skills. But we already have those in Minimum Experience list; we could split them out. Let's decide: - About the role: prose. - Responsibilities: list of major activities. - Requirements: Education + Minimum Experience (the 5+ years etc). We'll list each as
      • . - Qualifications: Preferred Certifications + Preferred Experience. - Skills: Soft skills (communication, curiosity, action-oriented, etc). Could also include "Ability to effectively communicate business risk from cybersecurity topics" but that's in Preferred Experience; maybe keep there. - Benefits: list of benefits. We must not repeat content. Ensure we capture all substantive info. Let's extract each piece. About the role prose: "As a Sr Security Engineer, you will work on complex technical security solutions across multiple technology stacks. You work closely with development, DevOps, and infrastructure team members to build best in class security practices." Add company description maybe: "At The Michaels Companies Inc., our purpose is to fuel the joy of creativity and celebration. As the leading destination for creating and celebrating in North America, we operate over 1,300 stores in 49 states and Canada and online at Michaels.com and Michaels.ca. The Michaels Companies, Inc. also owns Artistree, a manufacturer of custom and specialty framing merchandise. Founded in 1973 and headquartered in Irving, Texas, Michaels is the best place for all things creative. For more information, please visit www.michaels.com." We can combine into one paragraph or two. Use

        . Responsibilities list items: - Analyzes complex security issues (e.g security events, threat models, etc) - Responsible to monitor, operate, configure, remediate multiple security tool (e.g firewalls, anti-malware) - Help to implement security processes/standards, for example Michaels Secure Coding Standard - Use tooling architecture and develop hands-on Security Automation that integrates with various DevOps/DevSecOps tools - Enhanced speed with security functions - Responsible to independently security controls, tools and monitoring - Leverage internal and external partnerships and networks to maximize the achievement of business goals - Execute systems strategies to support business goals - Resolves cross-functional issues - Other Duties As Assigned We'll keep as list. Requirements: Education: Bachelor’s degree in Computer Science, Information Security, or STEM related field of study. Minimum Experience items: - 5+ years of experience in security engineering - Experience with multiple security component (e.g. firewall and IPS) - Competency with complete security stack with in discipline (elgl network security) – likely typo; we keep as "Competency with complete security stack in network security discipline" - Good knowledge of incorporating secure coding into application development and DevOps practices - Prior experience with managing application security training programs - Experience with operations and security with GCP or AWS, Containers, and Serverless technologies - Established experience with Agile (including Scrum and Kanban) and software development lifecycle (SDLC) practices - Experience with web development languages (Java, Python, JavaScript, etc.) - Ability to navigate a rapidly changing landscape, while handling multiple responsibilities - Curious about new technology and always looking to acquire new knowledge - Excellent verbal and written communication skills - Be an action-oriented, independent, self-starter comfortable working in an unstructured, fast-paced environment We'll list each as

      • . Qualifications: Preferred Certifications: - CISSP, CISM, CCNP, OSCP, GIAC, etc. - Cloud Solution Architects Certification preferred Preferred Experience: - Experience with Windows and *nix operating systems, endpoint applications, networking protocols and devices - Experience with single sign-on (SSO), OAuth 2.0, OpenID Connect and SAML - Ability to effectively communicate business risk from cybersecurity topics - Active involvement with practices emerging from OWASP, NIST and SANS, among others We

Similar jobs

Sr Security Engineer

Randstad Digital AmericasNew York, NY· 3 wk ago
Information Technology$57–$67/hrapply on randstadusa.com

Sr Security Engineer

LennarIrving, TX· 1 mo ago
Information Technology$30k/yrapply on careers.lennar.com

Sr Security Engineer

MeijerMichigan, United States· 3 mo ago
Information Technologyapply on meijer.wd5.myworkdayjobs.com