Security Engineer
CAI

Job Info

---

Job Profile Summary

CAI is hiring! We are looking for a Security Engineer to join our team as a salaried associate. This is an awesome opportunity to work a hybrid work schedule out of Columbus, OH.

Our client requires 2 days onsite at their offices.

Duties & Responsibilities

• Ownership of efforts related to the securing of the company's infrastructure. Example projects include leading the updating process for the organization's disaster recovery plan, incident response playbooks, enhancements to the organization's privileged access management program
• Collaborate with IT operations and core engineering teams to assure required controls are in place and documented within the context of the company's security standards
• Provide subject matter expertise on architecture, authentication, and system security
• Assess security tools and integrate tools as needed, particularly open-source tools
• Identify, investigate, and mitigate information security risks with a focus on data protection and fraud exposures
• Design infrastructure and drive its implementation to protect the company's networks and systems
• Conduct security reviews of core corporate and production infrastructure
• Build security tools and processes for critical infrastructure protection, monitoring and remediation

Qualifications

• B.S. Computer Science or equivalent experience
• 5+ years work experience in information systems security
• Experience with information systems security standards and practices (NIST 800-53, PCI-DSS, etc.)
• Conversant with system and application security risks, threats and vulnerabilities
• Demonstrated experience in cloud security delivered within the context of customer facing roles
• Coding experience in one or more general purpose languages, preferably Python
• Experience with attacks and mitigation methods, working in two or more of the following:
• Network protocols and secure network design
• Common security libraries, security controls, and common security flaws that could apply to Current's applications.
• Discovery and patching SQLi, XSS, CSRF, SSRF, authentication and authorization flaws, and other web-based security vulnerabilities (OWASP Top 10 and beyond)
• Common authentication technologies including OAuth, SAML, CAs, OTP/TOTP
• Browser-based security controls such as CSP, HSTS, XFO
• Standard web application security tools
• Operating system internals and hardening (e.g. Windows, Linux, OS X, Android)
• Security assessments and penetration testing
• Authentication and access control
• Applied cryptography and security protocols
• Security monitoring and intrusion detection
• Incident response and forensics
• Development of security tools, automation or frameworks
• Background in leading information technology audits
• Experience with Active Directory Forest Design, Centrify, Thycotic a plus

Physical Demands (see below)

• Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state and local standards
• Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc.
• Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard and monitor

CAI is a global technology services firm with over 8,500 associates worldwide and a yearly revenue of $1 billion+. We have over 40 years of excellence in uniting talent and technology to power the possible for our clients, colleagues, and communities. As a privately held company, we have the freedom and focus to do what is right-whatever it takes. Our tailor-made solutions create lasting results across the public and commercial sectors, and we are trailblazers in bringing neurodiversity to the enterprise.

Learn how CAI powers the possible at www.cai.io

This job has expired.