Sr Security Engineer
for section headings. Use - for any list of duties/requirements/benefits. Use
for prose.
We need to decide which sections to include: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits.
We have content for each.
About the role: combine the initial description plus maybe company description? The initial description: "As a Sr Security Engineer, you will work on complex technical security solutions across multiple technology stacks. You work closely with development, DevOps, and infrastructure team members to build best in class security practices." Also maybe include the company description? Could be part of About the role. We'll include that as prose.
Responsibilities: list of major activities. We'll put each as
- .
Requirements: Minimum Education and Minimum Type Of Experience (the required experience). Could be combined under Requirements. We'll list education as
- maybe? Or we can have
for education and then
for experience items. But rule: Use - for any list of duties/requirements/benefits. So for requirements we can list each bullet as
- . Education could be a bullet.
Qualifications: maybe Preferred Special Certifications Or Technical Skills and Preferred Type Of Experience. Those are preferred qualifications. We'll put under Qualifications.
Skills: maybe we could separate technical skills? But we already have qualifications covering certifications and preferred experience. Could also have Skills section for things like "Excellent verbal and written communication skills", "Ability to navigate...", "Curious about new technology", etc. Those are more like competencies. Could be under Skills. But we already have many items under Requirements and Qualifications. To avoid duplication, we need to decide categorization.
We have:
- Minimum Education: Bachelor's degree in Computer Science, Information Security, or STEM related field.
- Minimum Experience: 5+ years security engineering; experience with multiple security component (firewall and IPS); competency with complete security stack (network security); good knowledge of incorporating secure coding into application development and DevOps practices; prior experience managing application security training programs; experience with operations and security with GCP or AWS, Containers, Serverless; established experience with Agile (Scrum/Kanban) and SDLC; experience with web dev languages (Java, Python, JavaScript, etc.); ability to navigate rapidly changing landscape while handling multiple responsibilities; curious about new tech; excellent verbal/written communication; action-oriented independent self-starter comfortable in unstructured fast-paced.
- Preferred Certifications: CISSP, CISM, CCNP, OSCP, GIAC, etc.; Cloud Solution Architects Certification preferred.
- Preferred Experience: Experience with Windows and *nix OS, endpoint apps, networking protocols and devices; experience with SSO, OAuth 2.0, OpenID Connect, SAML; ability to effectively communicate business risk from cybersecurity topics; active involvement with practices emerging from OWASP, NIST, SANS.
We could treat the "Minimum Experience" as Requirements, and the "Preferred Certifications" and "Preferred Experience" as Qualifications. Skills could be things like communication, curiosity, etc. But those are already in Minimum Experience list. Could move them to Skills.
Better: Requirements: Education + Minimum Experience (hard requirements). Qualifications: Preferred Certifications + Preferred Experience. Skills: maybe we could list "Excellent verbal and written communication skills", "Ability to navigate a rapidly changing landscape, while handling multiple responsibilities", "Curious about new technology and always looking to acquire new knowledge", "Be an action-oriented, independent, self-starter comfortable working in an unstructured, fast-paced environment". Those are soft skills.
But we already have those in Minimum Experience list; we could split them out.
Let's decide:
- About the role: prose.
- Responsibilities: list of major activities.
- Requirements: Education + Minimum Experience (the 5+ years etc). We'll list each as
- .
- Qualifications: Preferred Certifications + Preferred Experience.
- Skills: Soft skills (communication, curiosity, action-oriented, etc). Could also include "Ability to effectively communicate business risk from cybersecurity topics" but that's in Preferred Experience; maybe keep there.
- Benefits: list of benefits.
We must not repeat content. Ensure we capture all substantive info.
Let's extract each piece.
About the role prose:
"As a Sr Security Engineer, you will work on complex technical security solutions across multiple technology stacks. You work closely with development, DevOps, and infrastructure team members to build best in class security practices."
Add company description maybe: "At The Michaels Companies Inc., our purpose is to fuel the joy of creativity and celebration. As the leading destination for creating and celebrating in North America, we operate over 1,300 stores in 49 states and Canada and online at Michaels.com and Michaels.ca. The Michaels Companies, Inc. also owns Artistree, a manufacturer of custom and specialty framing merchandise. Founded in 1973 and headquartered in Irving, Texas, Michaels is the best place for all things creative. For more information, please visit www.michaels.com."
We can combine into one paragraph or two. Use
.
Responsibilities list items:
- Analyzes complex security issues (e.g security events, threat models, etc)
- Responsible to monitor, operate, configure, remediate multiple security tool (e.g firewalls, anti-malware)
- Help to implement security processes/standards, for example Michaels Secure Coding Standard
- Use tooling architecture and develop hands-on Security Automation that integrates with various DevOps/DevSecOps tools
- Enhanced speed with security functions
- Responsible to independently security controls, tools and monitoring
- Leverage internal and external partnerships and networks to maximize the achievement of business goals
- Execute systems strategies to support business goals
- Resolves cross-functional issues
- Other Duties As Assigned
We'll keep as list.
Requirements:
Education: Bachelor’s degree in Computer Science, Information Security, or STEM related field of study.
Minimum Experience items:
- 5+ years of experience in security engineering
- Experience with multiple security component (e.g. firewall and IPS)
- Competency with complete security stack with in discipline (elgl network security) – likely typo; we keep as "Competency with complete security stack in network security discipline"
- Good knowledge of incorporating secure coding into application development and DevOps practices
- Prior experience with managing application security training programs
- Experience with operations and security with GCP or AWS, Containers, and Serverless technologies
- Established experience with Agile (including Scrum and Kanban) and software development lifecycle (SDLC) practices
- Experience with web development languages (Java, Python, JavaScript, etc.)
- Ability to navigate a rapidly changing landscape, while handling multiple responsibilities
- Curious about new technology and always looking to acquire new knowledge
- Excellent verbal and written communication skills
- Be an action-oriented, independent, self-starter comfortable working in an unstructured, fast-paced environment
We'll list each as
- .
Qualifications:
Preferred Certifications:
- CISSP, CISM, CCNP, OSCP, GIAC, etc.
- Cloud Solution Architects Certification preferred
Preferred Experience:
- Experience with Windows and *nix operating systems, endpoint applications, networking protocols and devices
- Experience with single sign-on (SSO), OAuth 2.0, OpenID Connect and SAML
- Ability to effectively communicate business risk from cybersecurity topics
- Active involvement with practices emerging from OWASP, NIST and SANS, among others
We
for prose. We need to decide which sections to include: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits. We have content for each. About the role: combine the initial description plus maybe company description? The initial description: "As a Sr Security Engineer, you will work on complex technical security solutions across multiple technology stacks. You work closely with development, DevOps, and infrastructure team members to build best in class security practices." Also maybe include the company description? Could be part of About the role. We'll include that as prose. Responsibilities: list of major activities. We'll put each as
for education and then
- for experience items. But rule: Use
- for any list of duties/requirements/benefits. So for requirements we can list each bullet as
- . Education could be a bullet. Qualifications: maybe Preferred Special Certifications Or Technical Skills and Preferred Type Of Experience. Those are preferred qualifications. We'll put under Qualifications. Skills: maybe we could separate technical skills? But we already have qualifications covering certifications and preferred experience. Could also have Skills section for things like "Excellent verbal and written communication skills", "Ability to navigate...", "Curious about new technology", etc. Those are more like competencies. Could be under Skills. But we already have many items under Requirements and Qualifications. To avoid duplication, we need to decide categorization. We have: - Minimum Education: Bachelor's degree in Computer Science, Information Security, or STEM related field. - Minimum Experience: 5+ years security engineering; experience with multiple security component (firewall and IPS); competency with complete security stack (network security); good knowledge of incorporating secure coding into application development and DevOps practices; prior experience managing application security training programs; experience with operations and security with GCP or AWS, Containers, Serverless; established experience with Agile (Scrum/Kanban) and SDLC; experience with web dev languages (Java, Python, JavaScript, etc.); ability to navigate rapidly changing landscape while handling multiple responsibilities; curious about new tech; excellent verbal/written communication; action-oriented independent self-starter comfortable in unstructured fast-paced. - Preferred Certifications: CISSP, CISM, CCNP, OSCP, GIAC, etc.; Cloud Solution Architects Certification preferred. - Preferred Experience: Experience with Windows and *nix OS, endpoint apps, networking protocols and devices; experience with SSO, OAuth 2.0, OpenID Connect, SAML; ability to effectively communicate business risk from cybersecurity topics; active involvement with practices emerging from OWASP, NIST, SANS. We could treat the "Minimum Experience" as Requirements, and the "Preferred Certifications" and "Preferred Experience" as Qualifications. Skills could be things like communication, curiosity, etc. But those are already in Minimum Experience list. Could move them to Skills. Better: Requirements: Education + Minimum Experience (hard requirements). Qualifications: Preferred Certifications + Preferred Experience. Skills: maybe we could list "Excellent verbal and written communication skills", "Ability to navigate a rapidly changing landscape, while handling multiple responsibilities", "Curious about new technology and always looking to acquire new knowledge", "Be an action-oriented, independent, self-starter comfortable working in an unstructured, fast-paced environment". Those are soft skills. But we already have those in Minimum Experience list; we could split them out. Let's decide: - About the role: prose. - Responsibilities: list of major activities. - Requirements: Education + Minimum Experience (the 5+ years etc). We'll list each as
- .
- Qualifications: Preferred Certifications + Preferred Experience.
- Skills: Soft skills (communication, curiosity, action-oriented, etc). Could also include "Ability to effectively communicate business risk from cybersecurity topics" but that's in Preferred Experience; maybe keep there.
- Benefits: list of benefits.
We must not repeat content. Ensure we capture all substantive info.
Let's extract each piece.
About the role prose:
"As a Sr Security Engineer, you will work on complex technical security solutions across multiple technology stacks. You work closely with development, DevOps, and infrastructure team members to build best in class security practices."
Add company description maybe: "At The Michaels Companies Inc., our purpose is to fuel the joy of creativity and celebration. As the leading destination for creating and celebrating in North America, we operate over 1,300 stores in 49 states and Canada and online at Michaels.com and Michaels.ca. The Michaels Companies, Inc. also owns Artistree, a manufacturer of custom and specialty framing merchandise. Founded in 1973 and headquartered in Irving, Texas, Michaels is the best place for all things creative. For more information, please visit www.michaels.com."
We can combine into one paragraph or two. Use
. Responsibilities list items: - Analyzes complex security issues (e.g security events, threat models, etc) - Responsible to monitor, operate, configure, remediate multiple security tool (e.g firewalls, anti-malware) - Help to implement security processes/standards, for example Michaels Secure Coding Standard - Use tooling architecture and develop hands-on Security Automation that integrates with various DevOps/DevSecOps tools - Enhanced speed with security functions - Responsible to independently security controls, tools and monitoring - Leverage internal and external partnerships and networks to maximize the achievement of business goals - Execute systems strategies to support business goals - Resolves cross-functional issues - Other Duties As Assigned We'll keep as list. Requirements: Education: Bachelor’s degree in Computer Science, Information Security, or STEM related field of study. Minimum Experience items: - 5+ years of experience in security engineering - Experience with multiple security component (e.g. firewall and IPS) - Competency with complete security stack with in discipline (elgl network security) – likely typo; we keep as "Competency with complete security stack in network security discipline" - Good knowledge of incorporating secure coding into application development and DevOps practices - Prior experience with managing application security training programs - Experience with operations and security with GCP or AWS, Containers, and Serverless technologies - Established experience with Agile (including Scrum and Kanban) and software development lifecycle (SDLC) practices - Experience with web development languages (Java, Python, JavaScript, etc.) - Ability to navigate a rapidly changing landscape, while handling multiple responsibilities - Curious about new technology and always looking to acquire new knowledge - Excellent verbal and written communication skills - Be an action-oriented, independent, self-starter comfortable working in an unstructured, fast-paced environment We'll list each as
- . Qualifications: Preferred Certifications: - CISSP, CISM, CCNP, OSCP, GIAC, etc. - Cloud Solution Architects Certification preferred Preferred Experience: - Experience with Windows and *nix operating systems, endpoint applications, networking protocols and devices - Experience with single sign-on (SSO), OAuth 2.0, OpenID Connect and SAML - Ability to effectively communicate business risk from cybersecurity topics - Active involvement with practices emerging from OWASP, NIST and SANS, among others We