Enterprise & Cloud Security Engineer

Solifi

United States

On-site

USD 110,000 - 150,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical

Dental

Vision

FSA

HSA

Life and AD&D Insurance

Disability Insurance

EAP

401K

Job summary

Solifi is seeking an Enterprise and Cloud Security Engineer to join the Information Security Group in Minneapolis. You will contribute to design, development, testing, and deployment of security solutions across IT networks and SaaS platforms.

Responsibilities include threat research, security system design, vulnerability monitoring, and incident response planning, with cross-functional collaboration across IT, SaaS, hosting, and engineering teams.

Qualifications

Bachelor's degree in information security/IT.
2-4 years IT security experience.
Familiarity with IT risk management and current IT risks.
Experience with SIEM, EDR, email/web security, cloud security.

Responsibilities

Develops understanding of threats and contributes to threat research and security strategy.
Designs security systems and recommends enhancements to leadership.
Analyzes attacker TTPs from security events across devices and endpoints.
Performs regular system tests and actively monitors network security.

Skills

Information Security

Risk Management

Threat Research

Security Governance

Communication

Education

Bachelor's degree in information technology/security

Tools

SIEM

Endpoint Protection

Email Security

Web Gateway

Cloud Security

Job description

About Solifi

Solifi deliver a solid financial technology foundation for equipment, working capital, wholesale, and automotive finance firms. At Solifi, we believe that commerce is only as strong as the system it runs on. Our mission is to reshape finance technology by bringing together proven solutions into a singular powerful technology platform designed to help protect and scale financial organizations. We guard our customers by being precise and reliable, we guide their success by combining powerful technology with proven expertise, and we help them grow by unleashing their potential.

About the Team

The Enterprise and Cloud Security Engineer to join our ISG (Information Security Group), reporting to the Cyber Security Manager. The ISG team is responsible for protecting Solifi’s infrastructure, applications, and data assets. The Security Engineer will be working cross-functionality with IT, SaaS and Hosting, and Engineering teams.

About the Position

The Enterprise and Cloud Security Engineer is responsible for contributing to the design, development, testing, and implementation of security systems within the organization's IT network and SaaS Solutions. Their primary responsibility is to help safeguard the organization's information assets against potential threats by supporting a comprehensive, layered security approach that aligns with industry standards and best practices.

Role and Responsibilities

Develops an understanding of current and emerging threats and contributes to threat research and the development of the organization's security strategy.
Assists in designing security systems and recommends enhancements to senior leadership to improve the organization's security posture.
Analyzes attacker tactics, techniques, and procedures (TTPs) from security events across a diverse array of security devices and end-user systems.
Performs regular system tests and actively monitors network security to identify and mitigate vulnerabilities.
Ensures role-based access control (RBAC) is implemented and maintained across IT systems to uphold the principle of least privilege.
Assists in establishing disaster recovery procedures, conducting security drills, and evaluating readiness.
Contributes to the development and maintenance of Incident Response (IR) plans and playbooks to ensure effective handling of security incidents.
Supports responses to security incidents, including post-event analysis to identify root causes and improve future resilience.
Communicates and collaborates effectively with cross-functional teams to integrate security practices throughout the organization's infrastructure.
Evaluate and recommend security technologies that strengthen the organization’s defensive posture.
Help with Security tools migration and merging security processes and procedures.

About You

A Bachelor’s degree in information technology/security.
2-4 years of experience in the IT/Information Security field, or an equivalent combination of education and experience.
Understanding of Information Security and IT Risk Management.
Familiarity with current IT risks and security solution implementation.
Basic project management skills and progress reporting.
Experience with standard security tools such as SIEM or Security Monitoring, Endpoint Protection / Response, Email Security Platforms, Web Gateway / Security Platforms, Cloud Security
Ability to interact with diverse personnel to support security measures.
Skill in planning, organizing, and prioritizing workloads.
Good written, verbal communication, business acumen, and commercial outlook.
Any of the following certifications is a plus: Security+, CEH, CISSP, CISM, CCSP, CCSK, GCIH, GCIA.

Additional Competencies

Analytical: Synthesizes complex and diverse information; collects and researches data to inform decisions; leverages intuition and experience to complement data analysis; designs efficient workflows and procedures to enhance operational effectiveness.
Business Acumen: Understands the business implications of decisions and their impact on profitability; demonstrates a strong knowledge of market trends and competition; aligns work and initiatives with the organization's strategic goals and vision.
Innovation: Exhibits original thinking and creativity; tackles challenges with resourcefulness; generates actionable suggestions to improve processes and performance; develops and implements innovative approaches and ideas that capture attention and inspire collaboration.
Communication and Presence: Communicates clearly and effectively in verbal, written, and presentation formats across diverse audiences, including teams, vendors, customers, and stakeholders at various organizational levels.
Planning and Organizing: Prioritizes and plans work activities effectively; uses time and resources efficiently; anticipates future needs and allocates resources accordingly; sets clear goals and objectives; organizes and schedules tasks to execute realistic and actionable plans.
Drive for Results: Applies analytical thinking and creativity to identify and address complex challenges with innovative problem-solving strategies; evaluates potential risks and proactively develops and implements strategies to mitigate them, ensuring successful outcomes.
Strategic Thinking: Develops and executes long-term strategies that align with the company’s vision and objectives; demonstrates the ability to anticipate trends and adapt plans to achieve organizational success.

Technical Competencies

Foundational Technical Skills: Continuously assesses strengths and areas for growth; actively pursues training and development opportunities; strives to build and expand technical knowledge; shares expertise with peers to foster team growth.
Network Security: Demonstrates strong knowledge of networking fundamentals, including firewalls, intrusion detection systems (IDS), access control, and VPNs, to protect and secure network infrastructure.
System Security: Proficient in implementing data protection, hardware security, and endpoint protection solutions to safeguard systems and sensitive information.
Incident Response: Deep understanding of the core stages of the incident response lifecycle, including preparation, identification, containment, eradication, and recovery, to mitigate and respond to security incidents effectively.
CyberSecurity Technologies: Hands-on experience with tools and platforms such as Kali Linux, AWS, Azure, SIEMs, SOARs, SentinelOne, Wiz, Azure Defender, Palo Alto, Imperva, and 1Password (or similar tools).
Platforms & Operating Systems: Proficient in working with multiple platforms & operating systems, including AWS, Azure, Windows OS, macOS, Linux OS, Containers.
Application Security: Knowledge of secure coding practices, patch management, and vulnerability remediation to protect applications from security threats.
Vulnerability Assessments: Skilled in identifying, assessing, reporting, and mitigating vulnerabilities to reduce risks and enhance system security.
Governance: Knowledgeable in risk management and regulatory compliance, ensuring alignment with industry standards and organizational policies.