Principal Security Engineer/Architect in Waltham, MA

Hybrid (Local to Boston area) 

What you’ll do

Design and develop enterprise security solutions to improve or augment information security capabilities, standardize, modernize and integrate business. You will establish new security architecture prototypes, evaluate impacts of new technical solutions, and provide technical leadership at the enterprise level for design of information technology systems with a core focus on endpoint security, vulnerability management, network security, cloud security and security monitoring.

You will communicate IT Security standards, architecture frameworks & patterns, cyber security principles and product roadmap to be used throughout the IT organization to guide technology decisions and leverage opportunities through efficient design of endpoint security, network security, vulnerability management and security monitoring programs.

• Establish procedures for adoption and operationalization of IT security standards (e.g. NIST CSF).
• Research IT security architecture products and services following industry best practices, apply analytics to identify apt solutions, recommend design decisions to layout a strategic direction for the organization.
• Serve as the security technical leader for the Cybersecurity Engineering organization, influencing the security posture and roadmap for complete portfolio of responsibilities.
• Assist IT product & business teams on IT security audit review & exception process, identify compliance violations and recommend appropriate compensatory controls to meet Client IT security standards.
• Effectively communicate architectural design decisions, cyber defense strategies & product roadmaps to management/leadership teams.
• Mentor, guide, and train junior engineers towards becoming cybersecurity professionals.

 What you will need:

• A passion for all things security. A deep understanding of a designing defense in depth capabilities based on modern exploitation practices and technology.
• In-depth expertise of public/private cloud security solution and architecture best practices.
• Advanced level knowledge on design and implementation of cybersecurity defense in depth strategies focusing on CIS Critical Security Controls across a multi discipline complex enterprise environment.
• Knowledge & experience on network security solutions and architecture
• Design and implementation experience of modern and large-scale endpoint security solutions in both enterprise (on-premises) and public cloud environments like Microsoft Azure or AWS
• Experience automating manual tasks through orchestration platforms or custom scripting.
• Experience with cloud-based security controls (secure web gateway, next gen firewall, cloud access security broker).
• Strong background in defining security requirements across network, database, operating system and applications. Knowledge on security solutions such as IDS/IPS, secure remote access, firewalls, encryption, secure protocols, data protection, data loss prevention and identity management solutions.

Preferred Experience/Skills

• As part of 10+ years’ experience you will have 7+ years’ experience designing and implementing enterprise IT security solutions focusing on endpoint security, network security, cloud security, vulnerability management and/or security monitoring within a large utility organization focused on transmission and distribution of electricity and gas.
• Is sought out as a trusted advisor and assists in the creation of solution designs, security requirements, and risk mitigation guidance in alignment with industry best practices and regulatory requirements.
• Evangelizes the end point security program fundamentals, tools, processes and serves as a consultative partner with technology and business teams.
• Experience with fully owning epics, features and stories to provide guidance to product/platform teams as needed.
• Manages and performs product evaluations, recommends and implements products/services for Information Security that support strategic operational needs and security requirements.
• Contributes to the creation of the security strategy and supports risk prioritization efforts.
• Experience with Information Security frameworks such as NIST.
• Experience within cloud platforms such as Microsoft Azure.
• Experience working in Agile squads
• Experience of designing and managing security controls within service providers
• Strong communication (Written and Verbal), leadership and partnering skills.
• Able to demonstrate a high degree of credibility and influence senior stakeholders within the Organization.
• Able to operate as a highly independent worker and as part of a strong team/collaborative approach.
• Security Qualifications such as Azure Security Associate/Azure Solution Associate/CISSP/CCSP/ etc.

Rangam Consultants is a minority, women-owned, disability workforce solutions global organization. Specialized in attracting and retaining talents globally for a rewarding career in IT, Engineering, Scientific, Clinical, Healthcare, Administrative, Finance, Business Management, and many more, while integrating veterans and individuals with disabilities into the workforce. Indeed, we connect career aspirants to relevant job opportunities, be it jobs in USA, UK, India, or Ireland. Also remote jobs, work-from-home jobs, or contract jobs in different verticals and industries.
Rangam strives to put job seekers first, giving them free access to search for jobs, post resumes, and research companies.Every day, we connect millions of people to new opportunities.