Job Title: Information Security Engineer
Location: Remote
Duration: 12 Months
Tax Terms: 1099 W2 C2C
Must Have Qualifications:
Must have a minimum of 5 years of handson experience with implementing API security strong preference for experience specifically using Cloudflare.
Malware testing and vulnerability scanning are a must.
Preference for any pen testing or security certs.
Position Overview:
Seeking an Information Security Engineer Specialist to join the Endpoint Security team. The candidate would be responsible for providing support for evaluating and implementing API security with an emphasis on Malware vulnerability scanning and data loss prevention.
Our Impact:
- This team is tasked with providing endpoint protection and security configuration management to the enterprise.
Your Impact: - Configure and evaluate API security using Cloudflare API gateway and API shield.
- Collaborate with API owners and architecture teams to understand API space.
- Understanding of ingress and egress points and how to protect against malware and other threats.
- Establish and maintain operational configuration and other process/procedures to ensure efficiency of new and existing detective and preventative configuration policies.Provide support to the Cyber Security Operations Center and Threat Detection Teams with recommendations and handling of their requests for changes updates and improvements of endpoint polices.Coordinate with other infrastructure engineering and application project/support teams to ensure new policies/assets are deployed and issues impacting tools and systems are resolved quickly and effectively without adversely impacting the affected business systems.
- Participate in oncall rotation.
- Coordinate with Information Security team to ensure solution assurance and compliance to security policy procedures standards and baseline security configurations.
- Understand and advocate IT Security standards reference architectures.
- Demonstrate an understanding of malware threats vulnerabilities and the complete affect these could have in the environment.
- Communicate optimally with clients to identify needs and evaluate alternative technical solutions and strategies.
- Qualifications:
- 57 years of relevant experience in IT Security . Handson experience with Cloudflare implementing API security . Deep understanding of cryptography concepts: hashing signing symmetric/asymmetric encryption and decryption etc.
- Experience in decryption of API traffic for security inspection ex. mTLS TLS 1.3 etc.
- Experience in API management ex. MuleSoft Apigee etc.
- Collaborate with API teams to design and document secure API design patterns.
- Experience assessing and securing APIs in alignment with OWASP and other security standards.
- Demonstrated knowledge of API design standards patterns and best practices . Familiar with industry security regulations and frameworks (MITRE Attack Framework NIST CIS CSC etc.) . General understanding of key IT components Secure LDAP Networking firewall load balancing Federated Identity.
- Familiar with change management processes and activities and change review board routines.
- Working knowledge of networking (routing DNS common ports protocols and firewalls) . Needs to be organized and have the capability to multitask by working multiple problems tasks and still seeing tasks through to closure working with all type of endpoint technologies. Must be able to work independently.
- Python scripting and automation experience.
Keys to Success in this Role: - Must be able to effectively perform both independently and crossfunctionally as a strong team contributor.
- Can work to help model and mentor other team members.