Cybersecurity Engineer (Linux DevSecOps Engineer)

The Cybersecurity Engineer plays a key role on the Global Information and Content Security (GICS) security engineering team, which supports Security Engineering, Security Architecture, Threat Detection and Response and other security functions through the deployment, management and maintenance of shared, reliable and extensible security platforms and systems. The role ensures that security best practices are followed and that the tools and processes supporting a secure platform are maintained and kept current. Ideal candidates combine security and systems engineering backgrounds so that business processes are configured correctly and security best practices are designed and implemented.

• Plan, design, engineer and implement security-related technologies.
• Configure, troubleshoot and maintain security infrastructure, including software and hardware in cloud environments and on-premises.
• Build and manage enterprise security platforms effectively.
• Implement design reviews to evaluate security controls.
• Conduct security audits and assessments to regularly determine the effectiveness of security platforms and identify areas for improvement.
• Perform host and operating system hardening, auditing, monitoring and logging with appropriate security controls and best practices while meeting security best practices and business goals.
• Identify and communicate opportunities to enhance the security posture of the organisation.
• Research and explore emerging security technologies and determine their appropriate use within the company.
• Prepare, document and create standard operating procedures and protocols, and cross-train and mentor other team members as needed.
• Communicate technical security issues and their implications within business units effectively to management and other business leaders.

• A minimum of 5+ years of hands-on experience in building, designing and maintaining enterprise security tools.
• A minimum of 5+ years of hands-on experience in security engineering.
• 5+ years of successfully implementing advanced cyber security technology in a complex environment.
• Experience engineering and administering security platforms including SIEM/SOAR systems, endpoint detection and response, vulnerability management, anomaly detection and cloud analysis.
• Hands-on technical experience with networking and computing system architectures, specifically their security aspects.
• 5+ years leveraging DevSecOps and secure architecture design principles to develop security capabilities.
• 5+ years of Linux system administration.
• 5+ years of scripting experience using Python or other equivalent languages.
• Thorough understanding of information security principles, techniques, policy frameworks and best practices.
• Hands-on experience in public cloud infrastructures such as AWS (Amazon Web Services).
• Hands-on experience with Kubernetes and Helm.
• A minimum of 3+ years of hands-on experience with automation technologies (e.g. Ansible, Terraform).

• Security and cloud certifications are a plus (CISSP, Splunk Admin, AWS Solution Architect).
• Hands-on technical experience with compliance and regulatory frameworks and how they affect architecture designs and review.
• AI engineering or AI security experience.

• Hybrid working model requiring three days per week onsite, based out of the Silver Spring, DC or Atlanta office.

• Actual salaries will vary based on a variety of job-related factors, including but not limited to geographic location, external market data, internal equity, skill set, experience, training, education and/or performance.

• Base pay is one component of the total compensation package; other rewards may include annual bonuses, short- and long-term incentives and program-specific awards.
• Health insurance coverage.
• Employee wellness program.
• Life and disability insurance.
• Retirement savings plan.
• Paid holidays, sick time and vacation.