Security Engineer

Novawatch; Scottsdale (AZ); On-site; USD 95,000 - 150,000; Full time

Job summary

Novawatch is seeking an experienced security engineer to design and implement enterprise-grade security controls across cloud and on-premises environments. You will help build automation, integrate security tooling, and drive improvements to protect critical assets.

The role requires hands-on experience with AWS/Azure/Google Cloud, scripting (Python/Perl/Bash), and security frameworks; you will document architectures and collaborate across teams to raise the security posture of the organization.

Qualifications

• Experience deploying security controls in public clouds (AWS, Azure, Google).
• Experience in on-prem data centers and physical servers.
• Scripting in Perl and Bash (Python a plus).
• Experience with Splunk, RASP, endpoints and other security tools.
• Familiarity with Puppet, Ansible, Terraform, CloudFormation and CI/CD.
• Experience deploying security agents for Linux in enterprise environments.
• Proficient in documenting security diagrams and related docs.
• Understanding of architectural frameworks and controls.
• Knowledge of information security concepts and best practices.
• Ability to translate infrastructure issues into risk/threat assessments.
• Experience in systems security analysis, baselining, hardening, and automation.
• 2–5 years in secure system design incl. PCI/SOX/HIPAA in high-volume environments.

Responsibilities

• Design and build security tools and processes for enterprise deployment.
• Develop automation within security, monitoring, reporting, and ticketing platforms.
• Design and support cloud-based security solutions for public and private clouds.
• Research and develop modern security toolsets to augment controls.
• Create hardened Linux configurations and collaborate across teams.
• Review and improve security processes and standard operating procedures.
• Conduct security research and communicate findings to mitigate vulnerabilities.

Skills

Security concepts & best practices

Threat assessment & risk translation

Documentation & diagrams

Education

GCUX / CISSP / GSEC or similar security certification

Tools

AWS

Azure

Google Cloud

Linux

Splunk

RASP

Endpoint security

Puppet

Ansible

Terraform

CloudFormation

CI/CD pipelines

Python

Perl

Bash

Git

Job description

About NovawatchThe Novawatch team is here to assist you through your entire managed security process. Novawatch provides customized 24/7 managed detection and response (MDR) services from our state-of-the-art security operation center located in Scottsdale Arizona. Our team is composed of solution experts that will ensure you are protected from threats and intruders.

About NovawatchThe Novawatch team is here to assist you through your entire managed security process. Novawatch provides customized 24/7 managed detection and response (MDR) services from our state-of-the-art security operation center located in Scottsdale Arizona. Our team is composed of solution experts that will ensure you are protected from threats and intruders.
Headquartered in Scottsdale, AZ, we are looking to add an experienced Account Executive to our growing team.
Position Summary
Keeps the organization’s proprietary and sensitive information secure. Works inter-departmentally to identify and correct flaws in the company’s security systems, solutions, and programs while recommending specific measures that can improve the company’s overall security posture. May be assigned to function as a supervisor, expert, or project leader.

Responsibilities

• Design and build security tools and processes for integration and deployment to systems across the enterprise
• Develop and support integration and automation within security, monitoring, reporting, and ticketing platforms
• Design, implement, and support cloud-based systems security solutions for both public and private cloud infrastructures
• Research and development of modern/next-gen systems security toolsets to augment existing controls
• Design and build hardened configuration requirements for Linux and work with multiple teams to help implement suggested solutions
• Review and analyze existing processes and suggest improvements for increased security, including operationalization of process and standard improvements
• Conduct security research to keep abreast of the latest security issues and help communicate and respond internally to mitigate any identified vulnerabilities

Requirements

• Experience in deploying and maintaining security controls within various public cloud environments (AWS, Azure, Google)
• Experience in deploying and maintaining security controls within on-premises data centers and physical server infrastructures
• Experience developing automation solutions in scripting/programming languages such as Perl and Unix shell such as Bash (Python a plus)
• Experience with Splunk, RASP technologies, Endpoint security software, and other advanced security and system security tools
• Familiarity with different styles of source control, automation technologies (such as Puppet, Ansible, Terraform and CloudFormation) and CI/CD pipelines
• Experience deploying security agent software for Linux systems and other enterprise technologies
• Proficient in documenting and building detailed systems security diagrams and related documentation
• Understanding of various architectural frameworks and controls
• Understand information security concepts, protocols, “industry best practices”
• Ability to translate infrastructure technologies such as network, database, server issue into risks for threat assessments and monitoring
• Experience performing systems security analysis, baselining, hardening, and automation across a large diverse set of systems
• 2– 5 years of secure system design responsibility including practical experience with system security compliance requirements (PCI, SOX, HIPAA, etc.) in a high-volume e-commerce or enterprise environment
• GCUX, CISSP, GSEC, or similar security / Unix professional certification

Requirements
Full Time

Compensation
The compensation range for this role is based on the national averages. The actual salary offer will be based on experience and expertise of the successful candidate