Senior Security Engineer - Remote - BI-EJFDG

Bounteous; United States; Hybrid; USD 130,000 - 170,000; Full time

Job summary

Bounteous is hiring a Senior Security Engineer to support Managed Security Services, working with multiple business units and client teams to protect data, products, and infrastructure. The role focuses on vulnerability management, security updates, intrusion responses, and maintaining strong security postures across applications.

The candidate will collaborate on security architectures, participate in on-call rotations, and ensure standard operating procedures are followed.

Qualifications

• BA/BS in Computer Science or equivalent experience.

Responsibilities

• Support strategy and roadmap for Managed Security service offerings and drive roadmap completion.
• Participate in BU security architecture and review input for downstream impact on Managed Services.
• Participate in security on-call and escalation rotation.
• Ensure standard processes and SOPs are updated and followed.
• Follow Cloudflare access standards as implemented by the Dining BU to support statements of work for Security services.
• Collaborate with clients and teams to address security posture and future strategy.
• Prioritize and handle complex incidents and ITSM tickets related to applications and production environments.
• Contribute to design and implementation of multi-level security strategies to protect client networks and data.
• Coordinate security upgrade requests and test software upgrades; classify scope as a project when needed.
• Respond to intrusions using computer forensics expertise.
• Monitor workflows and network traffic to anticipate problems and share remediation steps.
• Serve as escalation point within the team for Managed Services and clients.
• Work with units to deploy/manage firewall rules and encryption programs.
• Provide after-hours deployment support to development teams as needed.
• Architect solutions for security service proposals including cost build-up.
• Assist in completing Security Service/Change Requests and trackers.
• Coordinate with internal teams on IT, infrastructure, supplier risk, cyber defense, and applications for responses.
• Perform Vulnerability Management and reporting for Managed Services workflows.

Skills

Security operations

Cloudflare

Vulnerability assessment

Threat modelling

Incident response

Penetration testing

Security architecture

Communication

Education

BA/BS in Computer Science

Tools

Cloudflare

Burp Suite

Kali Linux

VMware Fusion

AWS

Sumo Logic

DataDog

CrowdStrike

ServiceNow

Terraform

Job description

Hello Everyone,

Greetings from Bounteous!!

We have an excellent Opening for the below Skills:

Job Role: Senior Security Engineer

Work Model: Hybrid/Remote

Work Timing: US Timing (Night Shift)

Mandate Areas: WAF, OWASP Top 10, Application Security, Cybersecurity Risk Assessment, Vulnerability Assessment, Penetration Testing, Threat Modelling.

Job Description : Managed Services Senior Security Engineer

We are looking to hire a new MS Senior Security Engineer who will report directly to the Managed Services Security Operations Manager. In their role they will work closely with our Bounteous team members, lines of business and clients to help protect the data, products and infrastructure against security threats in support of the Managed Services practice.

The role will be working with each of the Business Units, as well as Project, Engineering and client teams to meet security and compliance services as described in the clients SOW, including but not limited to: vulnerability management, security updates and upgrades, responding to intrusions, reviewing devices for strong security postures, and staying current with the latest Information Security trends and news.

Role and Responsibilities

• Support the implementation of a strategy and roadmap for Bounteous Managed Security service offerings and contribute to driving the roadmap to completion.
• Participate in BU security architecture and review offering input pertaining to how proposed changes will have positive or negative downstream impact to Managed Services' ability to effectively provide services.
• Participate in Security on call and escalation rotation.
• Ensure that standard processes and operating procedures are regularly updated, stored in a knowledge repository, and strictly followed.
• Follow access standards for Cloudflare as implemented by the Dining BU to support statements of work for Security services.
• Responsible for working with Managed Services clients and teams to help them address client queries regarding Bounteous' built application security posture, future strategy and current controls.
• Prioritize and address complex technical incidents and requests received through the ITSM ticketing system related to applications and production environments.
• Contribute to the design and implement multilevel security strategies to protect Managed Services Client networks and data resources.
• Coordinate requests by Managed Services accounts for security upgrades and test software to the upgrade as documented in the Service Request. Assess when Service Request scope is better suited as a Project and should be billed to the client as such.
• Respond to intrusions using expertise in computer forensics.
• Anticipate future problem areas by monitoring workflows and network traffic patterns. Share recommended remediation steps with appropriate Managed Services and account leadership as needed.
• Serve as an escalation point within the team by working with Managed Services teams, lower-level Security Analysts, clients, or project teams.
• Work with business units and Managed Services teams to understand the changes recommended to deploy/manage/maintain firewall rules and encryption programs to protect data resources.
• Provide after-hours deployment support to application development teams as needed.
• Architect solutions for specific Security service proposals, identifying cost buildup that includes work effort, tools, etc.
• Assist in the completion of Security related Service Requests, Change Requests, and assignment trackers.
• Working with internal corporate teams, upon request, to address questions in the area of IT, Infrastructure, Supplier Risk Management, Cyber Defense, and application teams to facilitate responses related to application functionality and security.
• Perform Vulnerability Management and reporting that feeds into the Managed Services workflow for resolution.

Preferred Qualifications

• BA/BS in Computer Science and or equivalent experience
• 6+ years of industry experience/background in IT services specifically senior security operations roles, experience as a business information security officer is a plus
• 2+ years of Cloudflare administration and configuration for enterprise clients
• Information Security specific qualification is desirable (such as CISM, CISA, CISSP)
• Experience in handling attack mitigation and thorough knowledge of various attacks
• Ability to assess security and business risks, analyzing and presenting critical risks and potential remediation activities to all levels of management within the business
• Experience in coaching on and analyzing of traffic for attack anomaly detection and creation of mitigation rules
• Security skills and certifications preferred: CISSP, GCIA GCIH, GCFA, GCFE, Cloudflare, etc.
• Proficient in the use of tools such as Cloudflare, Burp Suite, Kali Linux, VMware Fusion,
• AWS, Sumologic, Data Dog, CrowdStrike, ServiceNow, MS Office product suite (365)
• Fluent in Terraform
• Ability to work flexibly to meet demanding deadlines
• Excellent communication skills, both verbal and written
• Strong time management and organizational skills with the ability to manage multiple tasks and changing priorities
• Ability to work collaboratively in a team
• Experience in implementing security-related policies and procedures to support organizational scaling and growth projections
• Experience with 7 x 24 on call role and ability to participate in on call rotation, willing to work after hours and/or over-time to support service coverage requirements
• Willingness to work in permanent nightshifts to cover US time zones