Senior Security Engineer at Athene USA (West Des Moines, IA)

We are Athene. At Athene, we are driven to do more. We are a leading retirement services company that issues, reinsures and acquires retirement savings products designed for the increasing number of individuals and institutions seeking to fund retirement needs. We see every day as a new opportunity to measure ourselves against the best - and then we don't stop until we've set the bar even higher. We're ready to help you achieve more.

Purpose:

The Senior Security Engineer performs vulnerability assessments & security testing, working with operations and development teams on remediation and mitigation of findings. Provides support to planning, designing and implementing security controls which safeguard and monitor events for information systems, enterprise applications and data. Participates in security system deployments, configuration, monitoring and reporting. Designs AWS secure solutions and continuously improves/matures our DEVOPS processes and tooling.

 Accountabilities:

• 
  
• Maintains, configures and analyzes network and host-based security platforms. 
• 
  
• Provides security incident response support and participates in escalated incident responses as needed in response to information security related events.
• 
  
• Researches, analyzes and recommends the implementation of software or hardware changes to resolve any infrastructure security deficiencies.
• 
  
• Analyzes, troubleshoots and investigates security-related, information system anomalies based on security platform reporting, network traffic, log files, host-based and automated security alerts.
• 
  
• Coaches and mentors security engineering team on security solution maintenance.
• 
  
• Consults and collaborates with project teams and variety of IT teams to ensure solutions being designed follow Athene’s security standards, regulatory requirements and security best practices.  
• 
  
• Creates and maintains Threat Models for variety of projects and technologies.
• 
  
• Develops ad-hoc reports as needed. 
• 
  
• Engages needed security teammates to ensure identity management, logging, monitoring, alerting and risks solutions are actioned efficiently and in timely manner; acts as security liaison for projects. 
• 
  
• Evaluates new and emerging security technologies, protocols and standards; leads or assists in testing new security software and/or technologies. 
• 
  
• Evaluates systems using vulnerability scanners and manual techniques to verify system security settings and configurations.
• 
  

Qualifications and Experience:

• 
  
• 5+ years' experience with: analyzing, troubleshooting, and investigating security-related, information system anomalies based on security platforms.
• 
  
• Experience conducting antivirus and malware analysis; using SIEM technology (QRadar and/or Arcsight) and integrating DLP solutions.
• 
  
• Experience using SOC tools; working in Red-Hat Linux and Windows-based platforms; using Bit Locker and endpoint encryption tools.
• 
  
• Experience using Qualys and/or Tenable Nessus vulnerability scanners; using ATP, FireEye or Symantec Messaging Gateway.
• 
  
• Experience working with host-based IDS/IPS; NAC; web and email proxy. 
• 
  
• CISSP, SSCP or CEH certification required. 
• 
  
• Bachelor’s Degree or equivalent in Computer Science, Information Technology or related field.
• 
  

NOTE:  Successful candidate will be required to complete a pre-employment background check.

Drive. Discipline. Confidence. Focus. Commitment.  Learn more about working at Athene.

Athene is a Military Friendly Employer!  Learn more about how we support Our Veterans.

Athene is an Equal Opportunity Employer.  We do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, marital status, sexual orientation, or veteran status or any other status protected by federal, state or local law.

by via developer jobs - Stack Overflow