Stellantis - Security Engineer - IT Audit (4-6 yrs)

Security Engineer - Infrastructure Security.

Mobilisights : enabling a smarter world.

- Exponential growth in adoption and deployment of connected cars and devices is bringing previously unavailable datasets to market - at scale and in real-time.

Our vision is a 'smarter' world where innovative applications and services leverage connected vehicle datasets, and the insights they provide, to dramatically transform and continually improve everyday lives for consumers and businesses.

Stellantis, one of the largest global car makers and the parent company of fourteen of the most iconic industry brands including Jeep, Fiat, Maserati, Peugeot, and more, has created Mobilisights, a Data-as-a-Service Business Unit, which will harness sensor and other data from millions of connected vehicles and other devices to support data products and services for a growing array of customers.

Stellantis is becoming a #mobility #tech company with the size of a powerhouse and the soul of a startup.

Mobilisights represents this vision and future.

We are part of Stellantis a global company with 300 000 employees and will fully leverage the resources and the benefits that provides, but we are built like a startup and operate like one, too.

A truly global company, Mobilisights have teams all over the world and we work entirely remotely.

Our World.

Great mobility solutions start with great people! This is an exciting time to join us!.

The driving force behind us is the diverse and talented group of men and women around the world who bring their passion and experience to their work every day.

And while we are a truly global organization, we remain deeply rooted in the communities in which we operate, and our people live and work.

At Mobilisights, we assess candidates based on qualifications, merit, and business needs.

We welcome applications from people of all gender identities, age, ethnicity, nationality, religion, sexual orientation, and disability.

Diverse teams will allow us to better meet the evolving needs of our customers and care for our future.

EOE/Disability/Veteran.

The Role.

The Security Engineer role is an innovative, self-driven team player who will be able to educate, provide guidance and advisory on hardening cloud infrastructure primarily.

This individual will be an advocate for implementations that reinforce the security infrastructure.

The Ideal candidate combines technical acumen with an ability to drive by influence and communicate clearly.

Technically, this person will be security generalist with one or more areas of deep expertise in application security, infrastructure security in cloud environment .

Key Responsibilities :

- Drive the technology risk management program and conduct security risk assessments across the organization.

- Rank security risks, articulate risk in terms of business impact, recommend reasonable strategies to mitigate risks, appropriately document findings of assessments, and present to risk owners and management stakeholders.

- Manage the common control framework (CCF), evaluate control compliance in accordance with evaluation timelines, provide feedback, recommendations for gaps for identified gaps and issues, and document corrective action plans to remediate identified deficiencies.

- As an advocate for the infrastructure security, will help to build a solid Security Infrastructure reputation in the field.

- Identify and resolve security issues across the cloud infrastructure.

- Work with DevOps team to harden Containers /streamline infrastructure deployments in line with organization policies.

- Continuous monitoring of cloud compliance and advise DevOps teams on mitigation and contribute to terraform scripting for IaaC.

- Design, implement, and manage network policies within Kubernetes to enhance security controls.

- Create /update and maintain threat model for infrastructure projects/software.

- Manual and Automated secure code review, primarily Scala, Java, Ruby, terraforms.

- Adversarial security analysis using cutting edge tools /open-source tools knowledge and manual effort.

- Influence your team's and Engineering process, priorities, and choices to improve outcomes.

- Experience in security controls and IT security framework, audits, control assessments, or risk assessments.

Required skills and Experience :

- Plan, research, and design security architectures.

- Skills in Cloud infrastructure risks and compliance (Preferably AWS).

- Knowledge in cryptography, public key infrastructure, OWASP, NIST, CIS benchmark, threat modeling, SSDLC, DevSecOps.

- Candidate with expertise in CI/CD pipeline design, integration, Terraform scripting, Apache Kafka, API security.

- Scripting knowledge in Ruby, Scala, Java.

- Expertise in code review (Tool & manual).

- Expertise in Containerization, vulnerability management, AWS cloud services security.

Preferred Qualification :

- 5+ years of experience working in an information security role.

- Experience deploying services in a multi-cloud environment.

- Any Cloud certification (preferably AWS), designing networks, Kubernetes, Kafka solution architecture knowledge.

- Good knowledge in Network protocols, cloud services.

- Candidate with expertise in application security, Scala , Terraform , NIST, CIS benchmark , threat model methodologies , STRIDE /MITRE.