Cyber Security Engineer - (Zscaler or CrowdStrike) - REMOTE

NTT DATA Services strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.

We are currently seeking a Cyber Security Engineer - (Zscaler or CrowdStrike) - REMOTE to join our team in Toronto, Ontario (CA-ON), Canada (CA).

Cyber Security Engineer - (Remote based role)
The Cyber Security Engineer is responsible for reviewing technology designs, providing global strategic security direction, and designing security blueprints and solutions in support of NTT DATA Services' digital transformation to various cloud providers. They will help sculpt the information security design for the enterprise. This is an expert/lead hands-on technical role (not a policy or governance role).

Preferred tools to be proficient in include at least one of these: CrowdStrike, Zscaler, Tanium, or Eventbrite

Role purpose

The Security Engineering team is responsible for testing, designing and implementing security controls and solutions driven by CISO policies and standards to reduce the risk to NTT DATA Services and its customers. This includes enterprise-level design work for system security, cloud security, identity and access management, data protection and many more.

Within this team, the Cyber Security Engineer is responsible for reviewing technologies and designing security controls and solutions to reduce the risks to NTT DATA Services and its customers. They will help define the global enterprise and cloud security design and controls. This is an expert/lead hands-on technical role (not a policy or governance role).

Responsibilities
As a direct report to the Sr. Director, Security Engineering and Architecture, you will have the following accountabilities:

Work closely with enterprise architects, other functional-area architects, engineering, and security specialists to ensure adequate security solutions and controls are in place throughout all IT and cloud systems and platforms to mitigate identified risks sufficiently, and to meet business objectives and regulatory requirements;

Assess and understand NTT DATA Services' current security posture and future architecture, providing a viable solution path to bridge the gap;

Assess and understand the current and planned security posture for platforms (e.g. servers, databases, web servers), providing recommendations for improvement and risk reduction;

Provide security subject matter expertise on cloud control implementation for enterprise-scale projects;

Serve as a security expert in application development, database design, network and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices;

Design security configuration standards, procedures, and guidelines for platforms;

Design and implement mechanisms for assessing bi-modal compliance with the standards, procedures, and guidelines;

Identify and execute on opportunities to automate cloud security controls;

Design and build controls to address security risks and events as identified;

Define clear, concise, and executable standard operating procedures and documentation for any implemented solutions for formal operational handoff;

Recognize, adopt, and instill industry leading practices in security engineering throughout the organization;

Provide subject matter expertise on, and conduct in-depth security reviews of, new OS, database, middleware, etc. solutions as they are identified for use;

Identify and propose process improvements and identify opportunities for new processes and procedures to reduce risk;

Support security incident response as required;

Researches, designs, and advocates new technologies and security products that will support security requirements for the enterprise and its customers, business partners, and vendors;

Contributes to the development and maintenance of the information security strategy;

Evaluates and develops secure solutions, based on approved security architectures;

Analyzes business impact and exposure, based on emerging security threats, vulnerabilities and risks;

Communicates security risks and solutions to business partners and IT staff;

Embrace a culture of continuous service improvement and service excellence; and

Stay up to date on security industry trends.

Skills and Experience
Experience

7 years+ in Information Security space;

Strong experience with security strategy, with a passion to make security realistic, achievable and interwoven with the business fabric;

Strong experience in migrating enterprise companies from traditional data center infrastructure, application and data designs to hybrid or fully-cloud enabled practices.

Strong experience with cloud provider ecosystems, including Amazon AWS, Microsoft Azure, and OpenStack.

Strong experience with a broad range of security technologies, including NextGen Firewalls, DLP, NAC, IDS/ IPS, IdAM, Certificate Management, SIEM, Endpoint Protection, Anti-malware, vulnerability management;

Strong experience with multiple relational database platforms, including MSSQL, Oracle, MySQL;

Strong oral, written, and presentation abilities - able to convey risk to all levels of the business, from C-level executives to operations and development teams;

Some experience with Unix/Linux and Windows system administration;

Some experience with Cloud Access Security Brokers (CASB)

Some experience with NoSQL database platforms, including Mongo, Cassandra;

Some experience with logging and alerting platforms, including SIEM integration;

Some proven ability in security process and organizational design;

Current understanding of Industry trends and emerging threats; and

Knowledge of incident response methodologies and technologies.

Basic Required Qualifications:

5+ years+ in Information Security space

2+ years working with one or more Cyber Security tools like Zscaler, CrowdStrike, or Titanium

Desirable

Well-rounded background in network, host, database, and application security;

Experience implementing security controls in a bi-modal IT environment;

Experience driving a culture of security awareness;

Experience administering network devices, databases, and/or web application servers; and

Professional IT Accreditations (CISM, CCSA, CCSE, JNCIA, CCNA, CISSP, CCIE Security).

#LI-SGA

#INDCORP