Senior Info Security Engineer

HD Supply; Atlanta (GA); On-site; USD 110,000 - 150,000; Full time

Job summary

HD Supply is seeking a senior information security risk professional to lead day-to-day risk management activities for technology systems. The role focuses on identifying vulnerabilities, performing security testing, and developing detection methods to mitigate host and network-based threats.

The candidate will guide incident response, automate security analyses with scripts, and ensure compliance with SOX and PCI requirements while coordinating with auditors and legal, IT, and internal teams.

Qualifications

• BS/BA in a related discipline; 5–8 years experience, or MS/MA with 3–5 years; certification is required in some areas.

Responsibilities

• Tests new and existing systems for security vulnerabilities.
• Performs security testing, vulnerability scanning, and configuration reviews.
• Writes test plans, test cases/scripts, and test summary reports.
• Identifies vulnerabilities and develops methods to detect and prevent attacks.
• Builds security event detection tools and automates analyses with scripts.
• Analyzes electronic data for discovery, audit, or investigation.
• Ensures SOX, PCI, and regulatory compliance; supports auditors.

Skills

Security testing

Vulnerability assessment

Reverse engineering

Log analysis

Incident response

Regulatory compliance

Scripting / automation

Education

BS/BA or MS/MA in a related field

Job description

Job Summary

Responsible for day-to-day efforts on Information security risk management for the organization, focusing on detailed technology issues.

Major Tasks, Responsibilities, And Key Accountabilities

• Conducts independent test and evaluation of new and existing systems. Performs testing to include system security testing, vulnerability scanning, security configuration reviews of desktop/laptop images, writing test plans, test cases/scripts, status reports and test summary reports.
• Identifies security vulnerabilities and develops algorithms and methods for detecting and preventing host and network based attacks.
• Performs advanced analysis and/or reverse engineering of suspect source code and makes the appropriate changes to security event detection systems.
• Implements the appropriate processes and tools to deliver sound investigations as well as analyze log files for activities surrounding security events.
• Initiates security response procedures when a problem is detected and methodically creates and updates security standard documentation. Develops attack and defense methodologies for high risk computer networks. Writes scripts and develop software utilities to automate security analysis efforts.
• Performs a wide range of technical operations related to the location, retrieval, processing, review, analysis, and production of electronic data for discovery, audit, or investigation.
• Performs quality checks on all data collected, copies final data deliverables to various media, and documents the procedures used in the collection process.
• Maintains procedures and devices in compliance with SOX compliance, PCI regulations and other regulatory authorities as required. Provides data to internal or external auditors for security and compliance audits. Serves as a liaison between the legal team, outside counsel, IT personnel, and internal organization.

Nature and Scope

• Identifies key barriers/core problems and applies problem solving skills in order to deal creatively with complex situations. Troubleshoots and resolves complex problems. Makes decisions under conditions of uncertainty, sometimes with incomplete information, that produce effective end results.
• Independently performs assignments with instruction limited to the expected results. Determines and develops an approach to solutions. Receives technical guidance only on unusual or complex problems or issues.
• May oversee the completion of projects and assignments, including planning, assigning, monitoring and reviewing progress and accuracy of work, evaluating results, etc. Contributes to employees' professional development but does not have hiring or firing authority.

Work Environment

• Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
• Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.
• Typically requires overnight travel 5% to 20% of the time.

Education And Experience

• Typically requires BS/BA in a related discipline. Generally 5-8 years of experience in a related field OR MS/MA and generally 3-5 years of experience in a related field. Certification is required in some areas.

Our Goals for Diversity, Equity, and Inclusion

We are committed to creating a culture that promotes equity, respect, and advocacy for every HD Supply associate. We value the diversity of our people.

Equal Employment Opportunity

HD Supply is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.