Security Engineer

October 27

Apply Now

Receive Emails with Similar Jobs

TELUS

WebsiteLinkedInAll Job Openings

National telecommunications company in Canada

10,000+

Description

• As a Security Engineer, you will contribute to the implementation and maintenance of our security solutions including but not limited to, Cloud Security Posture Management and Zero Trust Network Access to help the organization to move towards a Zero Trust Architecture. • You’ll be keeping TAC safe and protected by establishing, operating and maintaining security controls and processes. • You’ll be part of a global team operating across multiple time zones supporting our clients across all services, solutions, and SaaS products. • You will have a broad understanding and expertise to operate across a number of the noted areas of security: Extension/design of core security services into TAC. • Design and deliver security services within TAC that are derived or extended from core TELUS Health and TELUS Corporate security services, aligned to the requirements and operating model within TAC. • Delivery of services spanning zero-trust network access, security monitoring and cloud security. • Gather and document resource, service and product information from application and system owners to assist in threat risk analysis and tools deployment. • Design, implement, and maintain Zero Trust Network Access across the organization's network and cloud infrastructure. • Deploy and configure CSPM tools to monitor and manage the security posture of cloud environments. • Conduct security assessments and audits to identify vulnerabilities and recommend remediation strategies. • Collaborate with cross-functional teams to ensure compliance with security policies and regulations. • Develop and implement procedures, and best practices to enhance the organization's security posture. • Stay up-to-date with the latest security trends, threats, and technologies to proactively address security risks. • Report on vulnerabilities found for system owners and administrators, providing recommendations for mitigation. • Work with the support teams to prioritize remediation to align with security SLA. • Design frameworks and processes to make adoption of security best practices easier for developers and system administrators.

Requirements

• Experience at security engineering, solution architecture and business analysis to support the design of solutions spanning people, process and technology. • An insatiable appetite for new and emerging security technologies. • Previous working experience as a Security Engineer for minimum 3 years. • BA in IT specializing in Cybersecurity, IT or Computer Science. • Advanced knowledge of Zero Trust Architecture, CSPM solutions, security monitoring (SIEM) solutions. • Advanced writing skills (Technical and non-technical). • Advanced knowledge of cloud security (Azure, AWS, GCP). • Advanced knowledge of application development processes and at least one programing or scripting language (e.g., Java, Scala, C#, Ruby, Perl, Python, PowerShell). • Advanced Networking knowledge such as public vs private IP, MAC Addressing, DNS, OSI model, DHCP. • Experience with SIEM tools such as MS Sentinel and QRadar and SOAR tools. • Solid analytical skills. • Solid understanding of NIST CSF, ISO 27001 frameworks and certifications. • Basic understanding of CI/CD pipelines. • Ability to multi-task and manage competing priorities using sound judgment. • Enjoy team collaboration and information sharing. • Superior collaboration skills to easily translate technical jargon into business language. • Applicable knowledge of Windows client/server, Unix/Linux systems, Mac OS X. • Must be able to work Eastern Standard Time. • Nice to haves: • Experience with Lacework Cloud Security Solutions. • Experience with Zscaler Products and Solutions. • Experience with Microsoft security solutions. • Leading security certifications such as CISSP, CISM, CEH, GCIH/ECIH etc. • Experience working on a fast paced security team supporting product/engineering functions, cloud infrastructure, and corporate infrastructure development. • Hands on Threat modeling, security risk assessment experience is a plus.