¡Esta propuesta te puede interesar!
The Senior Security Engineer will support, deliver, and lead many aspects associated with the offensive security strategy. This includes guidance on the design, implementation, development, and execution of solutions to maintain and improve the security posture of our environment.? This role will require advanced understanding of all aspects of information security and information technology, including policies, standards, technical procedures/processes, and regulatory requirements. The solutions shall be designed to mitigate and/or reduce business exposure to information security threats.
This will be accomplished by executing the following key strategies:?
- Penetration Testing:??Security Testing of applications and infrastructure from an adversary's view.?
- Responsible Disclosure:??Managing the communication path with security researchers (AKA Ethical Hackers) to report cybersecurity issues to Assurant.?
- Bug Bounty:??Work with upper tier security researchers to find cybersecurity issues at Assurant and provide compensation for notable?findings uncovered via paid bounties.?
- Attack Surface Analysis:??Discover critical misconfigurations, obsolete infrastructure,?improve our security posture, and improve Assurant’s cybersecurity?business rating.?
- Adversary Simulations:??Use of?adversary tradecraft to attempt to uncover attack paths that could be used to compromise critical controls and to test?our resilience against various types of?cyberattacks.??
- Critical Controls Testing:??Perform testing of critical controls as requested by the Senior Management Team.
Previous Experience:
- 7+ years of experience in the field of IT, information security, security engineering, security event monitoring, incident response, eDiscovery forensics, infrastructure administration, compliance, security administration, audit, and/or risk.
- Professional certification(s) in Information Security.
- CompTIA Security+
- GIAC Security Essentials
- Certified Security Analyst (ECSA)
- Certified Ethical Hacker (CEH)
- Certified Red Team Operator (CRTO)
- Offensive Security Certified Professional (OSCP)
- Certified Information Systems Security Professional (CISSP)
Si consideras que reunís los requisitos para el puesto y te gustan los desafíos, no lo dudes…. ¡Postulate!
Sobre Randstad
En Randstad nos moviliza ayudar a las personas y a las organizaciones a desarrollar todo su potencial. Ese es el compromiso que asumimos como compañía en todo el mundo, un compromiso que nos impulsa a ir más allá para lograr que nuestros clientes y candidatos alcancen el éxito. ¿Cómo lo hacemos?, combinando nuestra pasión por las personas con el poder de la tecnología, creando experiencias más humanas, que nos permitan ser una fuente de inspiración y apoyo para quienes nos eligen. Porque estamos convencidos de que mejores personas hacen mejores.
Nos esforzamos todos los días en crear un entorno diverso y nos enorgullece ser una empresa con igualdad de oportunidades para todas las personas, independientemente de su raza, color, religión, sexo, identidad sexual u orientación sexual, país de origen, genética, discapacidad o edad.
¡Esta propuesta te puede interesar!
The Senior Security Engineer will support, deliver, and lead many aspects associated with the offensive security strategy. This includes guidance on the design, implementation, development, and execution of solutions to maintain and improve the security posture of our environment.? This role will require advanced understanding of all aspects of information security and information technology, including policies, standards, technical procedures/processes, and regulatory requirements. The solutions shall be designed to mitigate and/or reduce business exposure to information security threats.
This will be accomplished by executing the following key strategies:?
- Penetration Testing:??Security Testing of applications and infrastructure from an adversary's view.?
- Responsible Disclosure:??Managing the communication path with security researchers (AKA Ethical Hackers) to report cybersecurity issues to Assurant.?
- Bug Bounty:??Work with upper tier security researchers to find cybersecurity issues at Assurant and provide compensation for notable?findings uncovered via paid bounties.?
- Attack Surface Analysis:??Discover critical misconfigurations, obsolete infrastructure,?improve our security posture, and improve Assurant’s cybersecurity?business rating.?
- Adversary Simulations:??Use of?adversary tradecraft to attempt to uncover attack paths that could be used to compromise critical controls and to test?our resilience against various types of?cyberattacks.??
- Critical Controls Testing:??Perform testing of critical controls as requested by the Senior Management Team.
Previous Experience:
- 7+ years of experience in the field of IT, information security, security engineering, security event monitoring, incident response, eDiscovery forensics, infrastructure administration, compliance, security administration, audit, and/or risk.
- Professional certification(s) in Information Security.
- CompTIA Security+
- GIAC Security Essentials
- Certified Security Analyst (ECSA)
- Certified Ethical Hacker (CEH)
- Certified Red Team Operator (CRTO)
- Offensive Security Certified Professional (OSCP)
- Certified Information Systems Security Professional (CISSP)
Si consideras que reunís los requisitos para el puesto y te gustan los desafíos, no lo dudes…. ¡Postulate!
Sobre Randstad
En Randstad nos moviliza ayudar a las personas y a las organizaciones a desarrollar todo su potencial. Ese es el compromiso que asumimos como compañía en todo el mundo, un compromiso que nos impulsa a ir más allá para lograr que nuestros clientes y candidatos alcancen el éxito. ¿Cómo lo hacemos?, combinando nuestra pasión por las personas con el poder de la tecnología, creando experiencias más humanas, que nos permitan ser una fuente de inspiración y apoyo para quienes nos eligen. Porque estamos convencidos de que mejores personas hacen mejores.
Nos esforzamos todos los días en crear un entorno diverso y nos enorgullece ser una empresa con igualdad de oportunidades para todas las personas, independientemente de su raza, color, religión, sexo, identidad sexual u orientación sexual, país de origen, genética, discapacidad o edad.
