SECURITY ENGINEER/ARCHITECT

The successful candidate will be a member of the IT Security team of Enact Mortgage Insurance. This team is responsible for the security of the company end-user computing environment, on-premise data center environment, and cloud infrastructure to protect customer data and the company's operational capabilities. The IT Security Engineer/Architect will serve as a member of the IT Security team and will work both independently and with security team members, application developers, and cloud engineers to promote security best practices in the environment. The candidate will have an influential role with the organization's CISO and IT Security posture.

YOUR RESPONSIBILITIES

• Conduct security risk assessments for applications and IT infrastructure, including cloud

• Participate on application projects to provide security analysis and architectural support

• Execute security architectures for cloud cloud/hybrid systems

• Perform threat modeling of applications during SDLC process

• Collaborate with development team and other IT staff to set specifications for new applications

• Perform static and dynamic application vulnerability scans, interpret output, identify risks that exceed the corporate appetite for such, and work with development and/or application teams on fixes or compensating controls

• Complete SDLC project artifacts to document project security analysis

• Provide subject matter expertise on information security architecture and systems engineering to other IT and business teams

• Develop technical strategy and tactics for IT security controls

• Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security

• Develop deployment plans and rollout new security technologies

• Review supplier security assessments

• Respond to customer due diligence inquiries and calls

• Stay abreast of emerging security threats, vulnerabilities and controls

Basic Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or Mathematics or 5+ years of work experience in the field

• Practical working experience with at least one programming language, such as ASP .Net, C#, Angular Javascript, etc.

• Good written and oral communications including the ability to develop engaging communications and relay security requirements in basic terms

• Good working knowledge of system security controls including application authentication, session encryption, input validation, application and database access roles, record-level access restrictions and authorization, exception management, auditing and logging

• Knowledge of programming for diverse operating systems and platforms using development tools

• Ability to read and interpret general business periodicals, professional journals, and technical documentation

• Analytical ability to develop and communicate key security metrics

• Work as part of a team, but also work effectively independently

Preferred Qualifications:

• At least 5+ years working in IT field and/or working in IT Security or an advanced degree in Computer Science or Information Systems

• Working knowledge of penetration testing tools and techniques

• Working knowledge of Amazon AWS environment, security controls and tools

• Working knowledge with Microsoft Windows servers, workstations and Active Directory

• Working knowledge of Unix servers and security controls

• Understanding of container environments

• Working knowledge of vulnerability scanners such as WebInspect (HP Fortify), CheckMarx, and Rapid7

• Working knowledge of DLP tools, proxy technology, CASB, CSPM, CIEM, CWPM

• Familiarity with databases including Oracle and SQL Server

• Familiarity with Vormetric, CyberArk, or Imperva

WHY WORK AT Our Client

• We have a real impact on the lives of the people we serve

• We work on challenging and rewarding projects

• We give back to the communities where we live

• We offer competitive benefits including:

o Medical, Dental, Vision, Flexible Spending Account options beginning your first day

o Generous Choice Time Off policy

o 12 Paid Holidays

o 40 hours of volunteer time off

o 401K Account with matching contributions

o Tuition Reimbursement and Student Loan Repayment

o Paid Family Leave

o Child Care Subsidy Program