Engr IV-Security Engineer

Overview

At Verizon, we're seeking to build our Platform Security organization and are seeking candidates with readiness to learn and build their security skills in the exciting and growing field of cloud computing.

As a member of Verizon's Platform Security organization, you will support the team in its goals of embracing cloud-based technologies across multiple providers (Amazon AWS, Microsoft Azure, Oracle OCI, Google GCP, etc.) supporting SaaS solutions. Cloud Security Operations team requires security skilled staff to support the demands of the business and to care for our customer base.

As a Cloud Security Technical Engineer, you will be a key contributor in information security, problem solving and relationship management to lead internal programs aimed at: achieving certification and attestation of API security against Verizon security policies, industry standards and regulations, and government regulations, identifying and mitigating security risks in our applications & cloud deployments; ensuring security alignment to corporate policies; and balancing API security requirements with the dynamic needs of our users and the values of our company. In this role you will gain valuable experience and insight in protecting Verizon's multiple cloud environments focusing on APIs and will be at the heart of guarding our data and applications against advanced threat adversaries.

We are seeking candidates with a passion and excitement for application, API and cloud security with the willingness to learn in a fast-paced dynamic environment. Are you up for the challenge?

Responsibilities:

• Become proficient with Verizon corporate security standards/best practices
• Administer SaaS based API security solutions (Apigee, 42Crunch, ReadyAPI, etc.)
  • Become subject matter expert of SaaS solutions
  • Manage user administration
  • Manage policies
  • Partner with Verizon API management (API gateway) support team for automated API vulnerability management
  • Assist customers with solution integration features
  • Ability to validate/trigger API security policies/rules.
  • Produce reports, scorecards and related metrics
  • Manage vendor(s) to meet the needs of the business drive future enhancements
  • Develop and maintain internal documentation
• Work closely and collaboratively with API Management, Application Security, and Business units to support their needs
• Partner with enterprise teams to establish preventative controls to API support security via automation.
• Understand, execute and revise python code of automation scripts
• Maintain strong awareness of API security incidents in the external community to identify threats and opportunities for enhancement. Apply those learnings to Cloud Security Operations program and associated solutions.
• Provide technical mentoring and knowledge transfer to members of the team.
• Perform all other duties as assigned
• Provide ongoing support and Collaborate with development teams to remediate vulnerabilities and improve security posture
• In-depth knowledge of DevOps tools and practices
• Integrating API Security Scans with existing application CICD Pipelines
• Stay up-to-date on the latest API Security Threats, Vulnerabilities, and industrial best practices
• Troubleshoot and resolve issues related to CI/CD pipelines and infrastructure
• Excellent communication strategies to effectively socialize new ideas, processes and tools to the stakeholders
• Monitor adoption rates and key metrics analyze data and provide regular report on progress and areas for improvement

Qualifications:

Must have:

• Bachelor's Degree
• Four or more years of relevant work experience.
• AWS Associate or Professional certification or a willingness to obtain within 6 months.

Ideally, you'll also have

• Four or more years in REST API development and associated security controls implementation
  • Understanding of secure API coding principles and Application Security in general
  • Understanding of APIs design and implementation
  • Understanding of API development tools (IDEs like VS Code, Eclipse and tools like Postman)
  • Strong understanding of HTTP and REST architecture
  • Understanding of Swagger / OpenAPI specification
  • Understanding of vulnerability assessment concepts (SAST, DAST)
  • Understanding of SSO integration concepts (SAML, OpenID connect)
  • Understanding of container security and orchestration concepts and best practices (Docker, Kubernetes, Elastic Container Service)

• Python Programming
• Cloud Computing
  • Familiarity of multi-cloud platforms (AWS, GCP, Azure, OCI, etc.)
  • Basic awareness cloud services such as IAM, compute (i.e. EC2, GCE), storage (volume/object), networking (VPC, VCN. Load Balancers, Security Groups/List), etc.

• Awareness of cloud consoles general navigation, ability to utilize CLI interface to run basic commands

• DevOps
  • Familiarity with Git Lab, Jenkins, Ansible, JIRA, Confluence
  • Familiarity with CI/CD tools
  • Experience in agile development methodologies
  • Familiarity with Kubernetes, Docker and container-based technologies

Interpersonal Skills

• Possesses customer centric attitude
• Ability to clearly communicate technical concepts to all audiences
• Professional posture, articulate, excellent written and verbal communications skills
• Performance oriented, self-directed ability to drive change & manage multiple projects
• Fast learner, capable of rapidly assimilating to existing processes and technologies
• Ability to prioritize projects and deliverables
• Appropriate escalation judgement & execution
• High collaboration and influence skills