Position: DevOps (Security Engineer)
Company: GlobalLogic
Experience required: 3y
Category: DevOps
English level: intermediate
Published: 2023-01-01T00:00:00+02:00

A brand new hybrid-cloud SaaS platform in the smart data storage domain which is targeting big enterprises as well as smaller businesses.

**Job Description**

We are seeking a technically skilled, strategically minded Security Engineer to help develop our threat intelligence program and capabilities. The ideal candidate should be familiar with threat intelligence principles and have experience in a proactive environment seeking out information in furtherance of an intelligence-driven strategy. This candidate should be familiar with threat actor TTPs, analyzing large amounts of data, and OSINT concepts. He or she will help enhance our capabilities by formulating new analytic techniques and working across teams to drive the supporting capabilities.

Candidates should have a solid understanding of network and host-based indicators and how to best leverage them. He or she should be able to help automate recurring tasks to improve the overall threat identification effectiveness of the supporting team.

**Job Responsibilities
**
Perform deep dive analysis of malicious artifacts.

Proficiency in AWS cloud security, identity and compliance products, Kubernetes, Network security, AuthN/AuthZ

Analyze large and unstructured data sets to identify trends and anomalies indicative of malicious activities.

Analyze telemetry data to identify signals indicative of sophisticated fraud actors.

Produce high-quality written, actionable intelligence on current and developing threats

Provide timely, relevant, and proactive analysis in support of Amazon Customer Service teams

Create security techniques and automation for internal use that enable the team to operate at high speed and broad scale

Drive engagement across Customer Service teams to establish trust relationships

Develop and review requirements for intelligence products

Track and report team progress using metrics that capture impact and value

Identify stakeholder needs and drive projects to improve the dissemination of actionable intelligence through automation or education

Take large, complex projects and break them down into manageable pieces, develop functional specifications, then deliver them in a successful and timely manner.

Deep dive and analyze key business performance metrics, identify gaps, and create plans to mitigate and drive to closure.

Develop, track, and report on key program performance metrics. Balance the business needs versus technical constraints.

5+ years of experience in Threat Intelligence research and analysis. Applicable security experience can apply.

Strong oral and written communication skills with the ability to present complex information in a clear and concise manner to a variety of audiences

Thorough understanding of insider threat-related issues

Experience with malware analysis, network flow analysis and large-scale data analysis.

Experience with threat modeling or other risk identification techniques

Strong organizational and multitasking skills with ability to balance competing priorities

Ability to make concrete progress in the face of ambiguity and imperfect knowledge

Nice to have: Understanding of Kubernetes security products and capabilities such as Kyverno, OPA, securing load balancers and network security policy 

**Department/Project Description**
A brand new hybrid-cloud SaaS platform in the smart data storage domain which is targeting big enterprises as well as smaller businesses.