Architect Unix Security Engineering

Job Overview:

We are seeking an experienced and skilled Senior UNIX/Linux Security Engineer to join our global UNIX/Linux Engineering team. The ideal candidate will

be responsible for designing, implementing, and maintaining robust security measures for our complex UNIX and Linux environments and services across

multiple data centers and cloud platforms worldwide.

Key Responsibilities:

Security Architecture and Design:

Design and implement secure UNIX/Linux architectures that align with industry best practices and compliance requirements

Develop and maintain security standards, policies, and procedures for UNIX/Linux systems

Collaborate with cross-functional teams to ensure security is integrated into all aspects of the IT infrastructure

System Hardening and Configuration Management:

Develop and implement system hardening guidelines for various UNIX/Linux distributions

Manage and maintain secure configurations using tools like Ansible, Puppet, or Chef

Implement and manage centralized configuration management systems

Vulnerability Management:

Conduct regular vulnerability assessments and penetration testing on UNIX/Linux systems

Analyze and prioritize vulnerabilities, coordinating remediation efforts with system administrators

Implement and manage automated vulnerability scanning tools

Access Control and Identity Management:

Design and implement robust access control mechanisms, including multi-factor authentication

Manage and maintain centralized identity and access management systems for UNIX/Linux environments

Implement and maintain privileged access management solutions

Security Monitoring and Incident Response:

Design and implement comprehensive security monitoring solutions for UNIX/Linux systems

Develop and maintain security information and event management (SIEM) use cases and alert rules

Participate in incident response activities, performing root cause analysis and implementing corrective measures

Compliance and Auditing:

Ensure UNIX/Linux systems comply with relevant industry standards and regulations (e.g., SOX, PCI DSS, HIPAA, GDPR)

Conduct regular security audits and assessments of UNIX/Linux environments

Prepare and maintain documentation for compliance and audit purposes

Security Tools and Automation:

Evaluate, implement, and manage security tools specific to UNIX/Linux environments

Develop and maintain scripts and automation processes to enhance security operations

Continuously research and evaluate new security technologies and methodologies

Capacity Planning and Performance Optimization:

Monitor system performance and capacity, ensuring security measures do not negatively impact operations

Optimize security configurations for high-performance and high-availability environments

Training and Knowledge Sharing:

Provide technical guidance and mentoring to junior team members

Develop and deliver security awareness training for system administrators and other IT Teams

Stay current with the latest security threats, vulnerabilities, and mitigation techniques

Required Qualifications:

Bachelor's degree in Computer Science, Information Security, or related field

15+ years of experience in UNIX/Linux system administration and security

In-depth knowledge of various UNIX/Linux distributions (e.g., Red Hat, CentOS, Ubuntu, SUSE)

Strong understanding of network protocols, firewalls, and security technologies

Experience with configuration management tools (e.g., Ansible, Puppet, Chef)

Proficiency in scripting languages (e.g., Bash, Python, Perl)

Familiarity with cloud platforms (e.g., AWS, Azure, GCP) and their security features

Knowledge of relevant security frameworks and standards (e.g., NIST, CIS)

Professional certifications such as CISSP, RHCE, LPIC, or equivalent

Preferred Qualifications:

Master's degree in Information Security or related field

Experience in large-scale, multi-datacenter environments

Knowledge of containerization technologies (e.g., Docker, Kubernetes) and their security implications

Familiarity with DevSecOps practices and tools

Experience with SIEM solutions and log analysis tools

Understanding of regulatory compliance requirements in multiple jurisdictions

This position requires a detail-oriented individual with excellent problem-solving skills, the ability to work in a fast-paced environment, and strong

communication skills to interact with various stakeholders across the organization.