and Requirements
The Information Security Engineer is an integral part of the Security Engineering and architecture group. Owns performing threat modelling, secure architecture review, DevSecOps pipeline build, security automation across a variety of security tools throughout the Public Cloud & enterprise.
Security Engineer will be working closely with Engineering, IT, Engineering teams to architect, build, deploy Security tools, provide guidance on vulnerabilities, remediations and mitigations.
Experience
Possesses detailed insights of a variety of attack patterns, threats, malicious actors, exploits and common vulnerabilities
Has deep insights of Application Security S-SDLC Lifecyle framework with OWASP TOp 10, SANS 25
Has deep insights of SAST, DAST, SCA (OSVM), IaC (Terraform, CloudFormation) security
Has prior experience on Public Cloud Security and tooling (Prisma Cloud, Twistlock)
Demonstrates knowledge of current and emerging threats
Has deep knowledge of Cloud Security and Application Security Concepts
Has deep knowledge on DevSecOps Automation using Python, Jenkins for Public Cloud Monitoring
Key Responsibilities
Learns about Synopsys business initiatives, products and attack surface to drive relevant security detections
In this role, you will help architect, deploy security solutions, tools for Application and Public Cloud Security.
You will work cross-functionally with your peers in Information Security, IT and Engineering
Research and evaluate new technology products for pilot or implementation to implement defensive measures
Develop and present security tooling deployment, documentation, Run books and SOPS for operations
Develop technical solutions and new security tools to mitigate security vulnerabilities
Partners with Security Engineers and Architects to drive improvements in technology and policy governance
Qualifications
experience of Analyzing and threat hunting evolving Application and Cloud Security threats and incorporate in internal frameworks using automations
Excellent background of foundational of Application and Cloud Security concepts (AWS, Azure)
3+ years of relevant Cyber Security Application Security Architecture and Tooling Deployment
Presenting security risks to wide audience including senior management
Excellent attention to detail and ability to task-switch
Ability to communicate and work seamlessly in a global team