Position: Senior Security Engineer
Company: Softjourn
Category: Security
Experience required: 5y
English level: upper

Softjourn is looking for a Senior Security Engineer!

**About the project**: 

The client is an American bank. They have several projects. They are currently looking for a dedicated team focused on Salesforce and Mulesoft. The client plans a migration from the old bank platform to the new one based on Salesforce. This would be a project from scratch. The current status of the project is preparing for the definition phase. They are looking for resources to help them define the scope, required people, budget, etc.

**Requirements**:

5 – 6 years of experience as a Security Analyst;
Bachelor’s Degree in information security, information technology, and information security assurance;
Working knowledge and understanding of Cloud security (Azure), data security, network security, identity, and access management, policy management, and risk management;
A deep understanding of Information Technology (i.e., Active Directory, Firewalls, Routers, Infrastructure, Databases, Logging, Monitoring, Change Management, Segregation of Duties, Cybersecurity, Physical Security, IT operations, Network Security, SIEM, DLP, EDR, Cloud Computing);
Experience with various scripting languages (Bash/PowerShell/Python);
General Information Technology and Computer Networking knowledge preferred;
Demonstrated problem-solving and critical thinking skills;
Strong verbal and written communication skills; 
Demonstrate capacity to act in both blue teams and red teams;
Ability to prioritize and work alone;
Upper-intermediate level of English.
 
**Responsibilities**:

Monitor events and triage alerts across various security platforms;
Monitoring security access;
Conducting security assessments through vulnerability testing and risk analysis;
Performing both internal and external security audits;
Analyzing security breaches to identify the root cause;
Continuously updating the company’s incident response and disaster recovery plans;
Verifying the security of third-party vendors;
Keep up to date with the latest security and technology developments;
Maintain the security appliances and services;
Provide an active role in defining security practices for new and ongoing projects.