OTHER

FEED

UNKNOWN

Collaborate with software development teams in the deployment of automated “Shift Left” and DevSecOps capabilities for vulnerability scanning of open-source packages, libraries, and containers, microservices, and serverless functions in the Jenkins CI/CD pipeline. Under minimal supervision, the Senior Cloud Security Engineer will design, deploy, and manage security technologies and modern automation tools for the enforcement of Discount Tire security controls across private and public cloud service platforms.

Overview:
Here at Discount Tire, we celebrate the spirit of our people with extraordinary pride and enthusiasm. Our business has been growing for more than 60 years and now is the best time in our history to join us. We are opening more locations every year and we are always looking for qualified individuals to join us in our growth. We are a company that promotes from within, both in our retail and corporate operations. Under minimal supervision, the Senior Cloud Security Engineer will design, deploy, and manage security technologies and modern automation tools for the enforcement of Discount Tire security controls across private and public cloud service platforms. This role will serve as a subject matter expert on cloud security and be an integral member of the organization’s security and risk team. The role includes collaborating with software development teams, cloud engineering teams, and business teams to enhance and deploy industry best practices and cyber security solutions. Essential Duties and Responsibilities:<ul><li>Design, implement, and maintain custom and native cloud security services in a large-scale hybrid multi-cloud cloud environment.</li><li>Develop new automation, orchestration and configuration management tools and workflows to accelerate the secure migration to, and adoption of, public cloud services.</li><li>Collaborate with security architecture and engineering, cloud platform engineering and operations teams to design and deploy adequate security controls to align with business strategies and roadmaps.</li><li>Manage Discount Tire x.509 PKI services, certificate lifecycle management solutions, native cloud cryptographic solutions, and SSH key management (e.g. SCEP, ACME).</li><li>Manage and configure Discount Tire Cloud Security Posture Management (CSPM) platform and Cloud Workload Protection (CWPP) configurations to align with NIST, CIS, ISO 27001, ISO 31000, and Cloud Security Alliance (CSA) security standards.</li><li>Collaborate with software development teams in the deployment of automated “Shift Left” and DevSecOps capabilities for vulnerability scanning of open-source packages, libraries, and containers, microservices, and serverless functions in the Jenkins CI/CD pipeline.</li><li>Collaborate with platform engineering teams to integrate infrastructure-as-code (IaC) scanning of CloudFormation, Terraform and Kubernetes manifests into their toolchains to enforce desired state configuration patterns.</li><li>Work with software development teams to help them understand and remediate software defects found by SAST, DAST and SCA scanning.</li><li>Manage the CSPM integrated vulnerability management dashboard to bring visibility of the Discount Tire multi-cloud technical security debt. Generate a reporting dashboard for compliance and leadership review.</li><li>Configure and tune cloud web application firewalls (WAF), DDoS, and bot protection policies and services.</li><li>Collaborates with Security Operations Center with the development of Enterprise Splunk security event management and alerting on SaaS / cloud hosting provider security events.</li><li>Participate in the standards development and implementation of applicable security and enterprise architecture standards.</li><li>Ensure that accurate design diagrams, system configurations, process design documentation, operating procedures and application integration documentation is delivered and maintained.</li><li>Coordinate with SOC and Splunk administration team to configure remote API log collection for cloud services and SaaS platforms.</li><li>Provide support to Security and Network Operations Team, knowledge transfer and serve as escalation point for Tier III and IV issues.</li><li>Completes work in a timely and accurate manner while providing exceptional customer service.</li><li>Other duties as assigned.</li></ul> Qualifications:<ul><li>Minimum 5 years demonstrated experience in cloud security domains and/or IT security engineering experience.</li><li>Deep technical knowledge of Amazon Web Services, Azure, Salesforce and Google cloud platforms.</li><li>Strong understanding of SaaS services and application workload security in the context of cloud services design.</li><li>Strong background in systems engineering with Windows server and Linux (RHEL) Apache, SAP Hybris, MySQL, Tomcat, and native cloud services.</li><li>Strong knowledge of network and web related protocols (TCP/IP, UDP, IPsec, HTTP, HTTPS, routing protocols).</li><li>Experience with mobile application and device security posture settings beneficial.</li><li>Demonstrated proficiency to automate/script daily tasks through Java, JSON, Python, Bash, or equivalent.</li><li>4 years’ experience / knowledge of LDAP/AD directory services, cloud identity federation services, OIDC/OAuth2, and SAML2 single sign-on technologies.</li><li>Solid understanding of x.509 PKI services, certificate lifecycle management, native cloud cryptographic solutions, SSH key management (e.g. SCEP, ACME).</li><li>In-depth understanding of software development process, DevOps, Jenkins CI/CD, and BitBucket.</li><li>In-depth understanding of common vulnerabilities encountered in software development and the secure coding practices to address them.</li><li>Good oral, interpersonal, and written communication skills, and the capability to explain current threats to cloud infrastructure and/or IT infrastructures at technical and managerial levels.</li><li>Ability to build relationships and operate within a collaborative team environment.</li><li>The ability to work efficiently and accurately in highly collaborative team environment under pressure, meet deadlines, present a professional demeanor and work well independently is essential.</li><li>In addition, troubleshooting, organizational and problem-solving skills with a can-do attitude and the ability to adjust to changing requirements are essential.</li><li>Maintaining confidentiality, treating others with respect and upholding Company values is key.</li></ul> Education Requirements:<ul><li>This position requires BA/BS Computer Science degree, Information Security or related field or equivalent work experience may be substituted.</li><li>Security certification(s) desired (e.g., CEH, CCSP, CISSP, GIAC, etc.) or obtainable within 12 months.</li><li>Cloud certification(s) desired.</li><li>A Master’s degree highly preferred.</li></ul> Workdays:Normal work days are Monday through Friday. Occasional Saturdays and Sundays may be necessary. Work Hours:Normal work hours are between 7:00 a.m. to 5:00 p.m. Occasional overtime (more than forty hours per week) may be necessary  Discount Tire provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local law. #LI-Hybrid#LI-Remote#LI-GW1

Discount Tire

Senior Cloud Security Engineer Hybrid/Remote

Amazon Web Services (AWS)

Apache

Application Integration

Application Programming Interface (API)

Applications Security

Automation

Best Practices

Bug Tracking Software

Business Growth

Business Strategy

CCSP - Cisco Certified Security Professional

CISSP - Certified Information Systems Security Professional

Cloud Computing

Cloud-Based Hosting

Communication Skills

Computer Science

Computer Security

Configuration Management

Continuous Deployment/Delivery

Continuous Integration

Cryptography

Customer Support/Service

DevOps

Digital Certificates

Documentation

Engineering

Enterprise Architecture

Enterprise Protection

GIAC - Global Information Assurance Certification

HTTP (HyperText Transport Protocol)

HTTPS (HyperText Transport Protocol Secure)

Hybrid Cloud

IPsec (IP Security)

ISO (International Organization for Standardization)

Identify Issues

Identity Federation

Information/Data Security (InfoSec)

Internet Protocols

Internet Security

Interpersonal Skills

Jenkins

Knowledge Transfer

LDAP (Lightweight Directory Access Protocol)

Leadership

Linux Operating System

Microservices

Microsoft Windows Azure

Microsoft Windows Server

MySQL

Network Administration/Management

Network Protocols

OAuth

Open Source

Operations Processes

Private Cloud

Private Security

Problem Solving Skills

Protective Services

Public Cloud

Public Key Infrastructure (PKI)

Red Hat Linux Operating System

Reporting Dashboards

Reporting Skills

Retail Operations

Risk

Routing Protocols

SSH (Secure Shell)

Salesforce.com

Secure Coding

Security Architecture

Security Assertion Markup Language (SAML)

Security Attacks

Security Design

Security Information and Event Management (SIEM)

Security Monitoring

Single Sign-On (SSO)

Software Development

Software Engineering

Software as a Service (SaaS)

Splunk

Standards Development

Systems Administration/Management

Systems Engineering

TCP/IP (Transmission Control Protocol/Internet Protocol)

Team Player

Technical Leadership

Time Management

Tomcat

U.S. National Institute of Standards and Technology (NIST)

UDP (User Datagram Protocol)

Vulnerability Scanners

Writing Skills

[AW]-iCims

Hybrid Science Jobs in Tempe, AZ

Hybrid Science Jobs in Tempe, AZ

Resume Resources

Get noticed by top employers!

Hybrid Science Jobs in Tempe, AZ

Senior Cloud Security Engineer Hybrid/Remote Discount Tire

Resume Resources