Senior Information Security Engineer - Military Veterans

• Facilitate the creation of compliance automation and policy-as-code to streamline cloud governance in partnership with technology and application owners. 

• Conduct regular assessments to identify gaps in security controls, processes, and systems and propose security enhancements to mitigate risks. 

• Design and build automations and playbooks to assist with and improve the efficiency of response to detections from relevant technical tools. 

• Collaborate with technology and application owners to establish and agree upon secure build standards. 

• Utilize DAST, SAST, SCA, and CNAPP tools to assess and report security risks. 

Qualifications:

• Bachelor’s Degree (or equivalent) in Computer Science, Information Technology, Cyber Security, or related discipline. 

• Minimum of 5 years of experience in roles related to AppSec/SSDLC/CI/CD/SECDEVOPS operations. 

• Information Security Certification preferred (CISSP) or SANS GWAPT SEC542 preferred 

• Significant knowledge and experience securing applications. 

• Knowledge of SSDLC and interacting with app dev teams for implementation 

• Knowledge of general attack stages, attacker Techniques, Tactics, and Procedures (TTPs), and defense models. 

• Experience with security control design and configuration in cloud and container environments. 

The well-being of WWT employees is essential. So, when it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:

• Health and Wellbeing: Heath, Dental, and Vision Care, Onsite Health Centers, Employee Assistance Program, Wellness program


• Financial Benefits: Competitive pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Tuition Reimbursement


• Paid Time Off: PTO & Holidays, Parental Leave, Sick Leave, Military Leave, Bereavement


• Additional Perks: Nursing Mothers Benefits, Voluntary Legal, Pet Insurance, Employee Discount Program

Equal Opportunity Employer Minorities/Women/Veterans/Individuals with Disabilities

Why WWT?

At World Wide Technology, we work together to make a new world happen. Our important work benefits our clients and partners as much as it does our people and communities across the globe. WWT is dedicated to achieving its mission of creating a profitable growth company that is also a Great Place to Work for All. We achieve this through our world-class culture, generous benefits and by delivering cutting-edge technology solutions for our clients.

Founded in 1990, World Wide Technology (WWT), a global technology solutions provider leading the AI and Digital Revolution, with $20 billion in annual revenue, combines the power of strategy, execution and partnership to accelerate digital transformational outcomes for large public and private organizations around the world. Through its Advanced Technology Center, a collaborative ecosystem of the world's most advanced hardware and software solutions, WWT helps customers and partners conceptualize, test and validate innovative technology solutions for the best business outcomes and then deploys them at scale through its global warehousing, distribution and integration capabilities.

With nearly 10,000 employees and more than 55 locations around the world, WWT's culture, built on a set of core values and established leadership philosophies, has been recognized 13 years in a row by Fortune and Great Place to Work® for its unique blend of determination, innovation and leadership focus on diversity and inclusion. With this culture at its foundation, WWT bridges the gap between business and technology to make a new world happen for its customers, partners, and communities.

Want to work with highly motivated individuals on high-performance teams? Join WWT today!

The WWT Information Security (InfoSec) team is currently searching for an Information Security Engineer to join the Security Operations Team. As a member of the team, you will be responsible for implementing and maintaining the tools and capabilities used to ensure secure configuration of the DEVOPS environment. You will also assist in identifying and investigating data loss events, insider threat events, collaborating with the Security Operations Center, Legal, Compliance, and Corporate Security teams to mitigate threats, and engaging with senior team members to perform response actions.  

Responsibilities (includes but is not limited to): 

• Be a technical subject matter expert (SME) responsible for organization wide application security, SSDLC, container security, secure CI/CD. 

• Deploy, configure, and maintain security tools and technologies to monitor, detect, and report security risks within the application environment. 

• Hands on experience securing code, code repositories, dependency/software repositories, developing applications, application databases, web applications, Kubernetes, docker, container environments, cloud environments, application networking. 

• Collaborate with technology and application owners for onboarding of cloud/container technologies to enhance the SSDLC (Secure Software Development Life Cycle).