高级信息安全工程师
Senior InfoSec Engineer
开发工程未标注地域
公司Sun Nuclear
薪资未公开
工作地点Worldwide
地域资格未标注地域
时区要求日间重叠约 9 小时,基本正常作息
用工类型Full Time
发布时间15 天前
数据来源Himalayas
高级信息安全部工程师负责开发用于保护和监控受监管的SaaS平台的工具、政策和流程。
关键职责:
- 与首席软件架构师合作,制定新Sun Nuclear Cloud平台的战略和设计
- 在AWS上实施安全策略和流程
- 进行定期渗透测试
- 实施并管理合规性审查
知识、技能与能力:
- 至少5年互联网信息安全相关经验
- 需要有至少一个受监管行业的经验
- 熟悉HIPAA者优先
- 熟悉AWS、Azure、GCP或其中一种组合
- 能够撰写说服客户的网络安全措施文档,具备保持HIPAA合规性的洞察力,能够适应国际安全要求,并具备定期管理入侵检测和渗透测试的纪律性
- 精通企业软件、设计原则、CI/CD和最佳实践
- 深入理解基于云的平台(最好是AWS)的各个方面,从开发到部署再到运维
- 自我驱动、有责任感、可问责、积极主动、以工作为荣、充满好奇心、尊重他人、包容
- 能够处理大量信息并快速提炼出可用知识
- 具备判断何时使用现有工具/框架/组件/功能,何时从头构建的能力
- 遵循复用、组件化和适当抽象层次的原则进行设计和开发
- 强大的沟通能力、技术设计/文档能力和人际交往能力
- 高质量执行能力和战略思维
最初发布于喜马拉雅山
查看英文原文
The Senior InfoSec Engineer is responsible for developing the tools, policies, and procedures for securing and monitoring a regulated SaaS platform.
Key Areas of Responsibility:
- Work with the Chief Software Architect on the strategy and design of the new Sun Nuclear Cloud platform
- Implement the security policies and procedures on AWS.
- Conduct regular penetration testing
- Implement and manage compliance reviews
Knowledge, Skills & Abilities:
- At least 5 years of related experience in internet InfoSec.
- Experience in at least 1 regulated industry is required.
- Familiarity with HIPAA preferred.
- Operated AWS, Azure, GCP or a combination
- Ability to write customer-convincing papers on security measures, the acumen to maintain HIPAA compliance, the ability to adapt international security requirements, and the discipline to regularly manage intrusion detection and penetration testing.
- Strong knowledge of enterprise software, design principles, CI/CD, and best practices
- Deep understanding and familiarity of the many aspects of cloud-based platforms (preferably AWS) from development to deployment to operations
- Self-driven, responsible, accountable, proactive, proud of your work, curious, respectful, inclusive
- Consuming large amounts of information and quickly distilling it into usable knowledge
- Strong sense of when to utilize available tools/frameworks/components/functions and when to build from scratch
- Designing and developing with the principles of reuse, componentization, and the proper level of abstraction
- Strong communication, technical design/documentation, and interpersonal skills
- High-quality execution and strategic thinking
Originally posted on Himalayas
本页面信息整理自 Himalayas,版权归原发布方所有。职位可能随时关闭,投递请以原始页面为准。
本站只做信息聚合展示,不参与招聘流程,也不向求职者收取任何费用。