Sr Information Security Engineer

Please find the below JD for the Sr. Information Security Engineer.

 Job Responsibilities:

Provide technical assistance and security guidance for new products and technologies used at QuinStreet

Establish and/or enhance and maintain an information security program that fosters appropriate, demonstrable, and coordinated information security policies and procedures.

Lead technical implementation of the security controls and security processes

Execute all defined strategies to mitigate all security related risks and implementing best practices.

Develop/configure and implement software that pertains to specific security controls that protect against potential security threats

Conduct security assessments and code reviews

Analyze, assess, and respond to application security threats and incidents and offer assistance to product teams

Thought partner for Product to define, shape and deliver the roadmap

Security architectural Ownership and Guidance

Drive innovation in their own team

Collaborate with other IT teams to ensure security is integrated into all aspects of our systems and networks.

Participate in troubleshooting sessions to find root cause of issues and provide quick workarounds and timely resolutions.

Prepare, Review, analyze and acknowledge daily / weekly / monthly security reports

Qualifications

• 5+ years of experience in security engineering or related field
• 3+ years of experience is Threat modelling and Application security penetration testing
• Hands-on experience using one of the major Enterprise Security Technologies, SIEM, EDR, Web Proxy, DLP, Vulnerability Management, Application Security,  Single Sign On, Identity Access Management, MDM Solutions
• Bachelor’s degree in computer science, Information Security, or related field
• Knowledge of security technologies, including firewalls, intrusion detection/prevention systems, anti-virus/anti-malware, data loss prevention, and encryption, Vulnerability Management, Application Security, Security Incident Management
• Knowledge of security assessment and auditing methodologies and tools
• Excellence in secure software development methodologies
• Excellent analytical and problem-solving skills
• Strong written and verbal communication skills
• Ability to work independently and in a team environment.
• Knowledge of Security Flaws and its Resolution as listed in sites like OWASP, SANS, etc.