Internet Storm Center

Job Description

Job Summary:

As an integral member of the Information Security Team, the Staff Cloud Security Engineer role will be responsible for growing and leading many information security functions at Reltio. This position will help define and drive the overall global enterprise security architecture in addition to helping lead the security vision, strategy, and roadmap around securing enterprise applications.

The Staff Cloud Security Engineer will partner with other technology teams for initiatives related to security strategy and implementation. The successful candidate will partner with leaders across the business to develop and deliver solutions that support business strategies and protect Reltio’s intellectual property and customer data globally.

Job Duties and Responsibilities:

Serve as a security subject matter expert by providing guidance on industry best practices and defense in-depth strategies for the security architecture
Recommend, test, design, deploy and optimize threat detection/prevention solutions
Develop new and novel defense techniques to identify and stop advanced adversary tactics and techniques
Work with the respective functional teams and stakeholders to resolve security related configuration issues
Perform technical risk assessments of new technology and ensure the solution meets secure architecture designs
Assess and measure risk impact of a security deficiency and communicate the risk or risks to stakeholders
Proactively identify issues and recommend configuration settings or supporting solutions to mitigate security deficiencies
Investigate security events and incidents leveraging security tools
Skills You Must Have:

8+ years of experience in information security
Strong knowledge of cloud security (AWS, Azure, GCP)
Strong knowledge of industry standard security technology: anti-virus & anti-malware, SIEM, SOAR, vulnerability scanning, DLP, firewall, IDS/IPS, etc.
Strong experience with scripting and infrastructure-as-code (IaC)
Strong understanding of vulnerabilities and common attack vectors
Experience with industry frameworks such as SOC1/SOC2, HITRUST, ISO
Solid understanding of audit methodologies and processes
Experience working with virtual teams in a global environment
Strong communication and presentation skills
Adaptable and agile
Good interpersonal, partnership and leadership skills (without direct authority of others
Skills That Are Nice to Have:

Experience developing and operationalizing a vulnerability management program
Experience working with container-based architectures
Security and Cloud certifications