POSITION SUMMARY:
The Sr. Security Engineer will be an integral member of the Information technology team focused on hardening systems, architecting and implementing tools to improve the corporate and production systems.
The ideal candidate must have experience managing and maintaining security in Windows and Linux environments; for both on-premise and AWS/azure cloud platforms. Has experience with systems hardening, patch management, log processing, and vulnerability management. The candidate must also have experience implementing and running enterprise security tools for A/V, patch management, and log processing and reporting.
RESPONSIBILITIES:
Responsible for the development of security tools and dashboards for security monitoring including data collection, aggregation, and dashboard.
Responsible for security all cloud environments including Azure, AWS, Office365, etc.
Create test cases and monitoring tools for any changes to both new and existing applications
Develop and implement security scripts and tools to streamline routine security processes
Collaborate with key teams and stakeholders on drafting and implementing security policies and controls
Draft security requirements that allow the development of tools which align strategic visions with pragmatic execution.
Implement and manage the Security Dashboard leveraging our logging and monitoring tools.
Partner with various teams to identify, plan, and implement security best practices in their respective areas.
Implement and manage identity management systems access to all Canoo systems
Proactively identify potential security issues and provide mitigation strategies
Implement and manage Static and Dynamic Code Analysis program
Manage Penetration Testing program
Research and analyze application behaviors and improving security and stability
Provide tier 2/3 engineering support.
Management of firewalls, security groups, acl, network security groups from vendors like Checkpoint, Cisco, Juniper, Palo Alto.
Setup and maintenance of site to site and end-user VPN solutions
Deployment of 2factor authentication systems (radius, FIDO, Google2fa, MS2fa).
QUALIFICATIONS:
BS degree in Computer Science / Engineering or a related field, or equivalent experience
Experience with Scripting Languages such as Python, Ruby, etc.
Extensive experience in building and debugging Linux kernel modules
Thorough understanding of Linux and Windows operating systems; knowledge of Operating System internals (memory management, scheduling, TCP/IP stack).
Deep understanding of Internet protocols including TCP/IP and HTTP
Experience with securing the software development life cycle, from requirements to design, implementation, testing, and release
Ability to work on multiple projects at a time in a fast-paced environment
Canoo is an equal opportunity-affirmative action employer and considers all qualified applicants for employment based on business needs, job requirements and individual qualifications, without regard to race, color, religion, sex, age, disability, sexual orientation, gender identity or expression, marital status, past or present military service or any other status protected by the laws or regulations in the locations where we operate.