Security Operations Engineer II

duckcreek; San Francisco (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Duck Creek Technologies seeks a Security Operations Engineer II to join the Information Security team. You will analyze, design, implement, monitor, and evaluate security systems protecting Duck Creek's computer systems and data.

This senior role requires staying current with cyber threat intelligence and applying best-in-class controls across internal and external security to anticipate threats and prevent breaches.

Responsibilities

• Support information security operations, assisting in the implementation and operation of robust controls for internal and external security requirements.
• Leverage standard security frameworks and manage the ongoing operations of the information security management system.
• Participate in the design and implementation of security configurations for servers, appliances, desktops, laptops, and mobile devices to protect systems from compromise.
• Contribute to the implementation of network firewall, intrusion detection/prevention, data loss prevention, and access control solutions for network protection.
• Provide Tier 2 support for secure remote access solutions for employees, third parties, and clients.
• Provide Tier 2 support for cryptographic controls to protect data at rest and in motion, including systems, databases, and data connections between systems and applications.
• Collaborate with relevant business entities to establish and support Secure Development Lifecycle processes for Duck Creek applications, including managing tools and resources for vulnerability and security code inspections.
• Support disaster recovery planning and implementation to meet business continuity needs for both internal and external systems and services.
• Assist in monitoring systems by acquiring and correlating logs to focus on security events and provide alerts for potential security incidents.
• Contribute to the development and maintenance of information security policies that align with Duck Creek's business model, industry standards, and regulatory requirements, including managing policy exception processes.
• Act as a subject matter expert during the technology risk assessment process to ensure alignment with the organization’s risk tolerance and risk profile.
• Support the development and execution of employee security training programs, educating employees on policies, standards, processes, and emerging security threats.
• Assist in business continuity and disaster recovery testing efforts across the organization.
• Ensure compliance with regul

Job description

Helping careers take flight. Reshaping an industry. Enable your career to be Made on Duck Creek.

WHO WE ARE:

Duck Creek Technologies is the intelligent solutions provider defining the future of the property and casualty (P&C) and general insurance industry. We are the platform upon which modern insurance systems are built, enabling the industry to capitalize on the power of the cloud to run agile, intelligent, and evergreen operations. Our modern SaaS solutions help insurers set a new standard and revolutionize how consumers interact with insurance companies.

Authenticity, purpose, and transparency are core to Duck Creek, and we believe insurance should be there for individuals and businesses when, where, and how they need it most. Our market-leading solutions are available on a standalone basis or as a full suite, and all are available via Duck Creek OnDemand. With more than 1,000 successful implementations to date, Duck Creek removes the IT burden for insurers so they can focus on the business of insurance.

We have a flock of more than 1,500 employees across the globe and are proud to be a flexible-first company-an approach that remains foundational to how we work.

We empower our employees with the flexibility to manage their day-to-day work, while taking a more intentional approach to how teams come together. Through our Flying Together initiative, we are building stronger connection and collaboration by bringing teams together for meaningful in-person moments and concentrating on our presence and hiring in key locations.

Our flexible-first environment continues to support productivity, inclusion, and collaboration, while evolving to create even more opportunities for connection and shared experiences across teams.

If working in a fast-paced, rapidly evolving company that is transforming one of the world’s oldest and largest industries sounds exciting, let us know. We are excited you are considering Duck Creek as a future employer and hope you decide to join "The Flock"!

To learn more about us, visit www.duckcreek.com and follow us on our social channels for the latest information - LinkedIn and Twitter .

TITLE : Security Operations Engineer II

WHAT YOU'LL DO:

The Security Operations Engineer II is a senior team member in the Security Operations function within Duck Creek's Information Security team. This role is responsible for analyzing, designing, implementing, monitoring, and evaluating the security systems that protect Duck Creek's computer systems and data. The engineer will support Duck Creek's information security operations, assisting in the implementation of best-in-class controls and processes for both internal and external security. The role requires staying up-to-date with the latest cybersecurity intelligence, including evolving hacker methodologies, in order to anticipate and address potential security breaches, threats, or cyber-attacks.

• Support Duck Creek's information security operations, assisting in the implementation and operation of robust controls and processes for both internal and external security requirements.
• Leverage standard security frameworks and manage the ongoing operations of the information security management system.
• Participate in the design and implementation of server, appliance, desktop, laptop, and mobile device security configurations to protect systems from compromise.
• Contribute to the implementation of network firewall, intrusion detection/prevention, data loss prevention, and network access control solutions for network protection.
• Provide Tier 2 support for secure remote access solutions for employees, third parties, and clients.
• Provide Tier 2 support for cryptographic controls to protect data at rest and in motion, including systems, databases, and data connections between systems and applications.
• Collaborate with relevant business entities to establish and support Secure Development Lifecycle processes for Duck Creek applications, including managing tools and resources for vulnerability and security code inspections.
• Support disaster recovery planning and implementation to meet business continuity needs for both internal and external systems and services.
• Assist in monitoring systems by acquiring and correlating logs to focus on security events and provide alerts for potential security incidents.
• Contribute to the development and maintenance of information security policies that align with Duck Creek's business model, industry standards, and regulatory requirements, including managing policy exception processes.
• Act as a subject matter expert during the technology risk assessment process to ensure alignment with the organization’s risk tolerance and risk profile.
• Support the development and execution of employee security training programs, educating employees on policies, standards, processes, and emerging security threats.
• Assist in business continuity and disaster recovery testing efforts across the organization.
• Ensure compliance with regul