Staff Security Engineer

Job Summary: As an integral member of the Information Security Team, the Staff Cloud Security Engineer role will be responsible for growing and leading many information security functions at Reltio. This position will help define and drive the overall global enterprise security architecture in addition to helping lead the security vision, strategy, and roadmap around securing enterprise applications. The Staff Cloud Security Engineer will partner with other technology teams for initiatives related to security strategy and implementation. The successful candidate will partner with leaders across the business to develop and deliver solutions that support business strategies and protect Reltio s intellectual property and customer data globally. Job Duties and Responsibilities: Serve as a security subject matter expert by providing guidance on industry best practices and defense in-depth strategies for the security architecture Recommend, test, design, deploy and optimize threat detection/prevention solutions Develop new and novel defense techniques to identify and stop advanced adversary tactics and techniques Work with the respective functional teams and stakeholders to resolve security related configuration issues Perform technical risk assessments of new technology and ensure the solution meets secure architecture designs Assess and measure risk impact of a security deficiency and communicate the risk or risks to stakeholders Proactively identify issues and recommend configuration settings or supporting solutions to mitigate security deficiencies Investigate security events and incidents leveraging security tools Skills You Must Have: 8+ years of experience in information security Strong knowledge of cloud security (AWS, Azure, GCP) Strong knowledge of industry standard security technology: anti-virus & anti-malware, SIEM, SOAR, vulnerability scanning, DLP, firewall, IDS/IPS, etc. Strong experience with scripting and infrastructure-as-code (IaC) Strong understanding of vulnerabilities and common attack vectors Experience with industry frameworks such as SOC1/SOC2, HITRUST, ISO Solid understanding of audit methodologies and processes Experience working with virtual teams in a global environment Strong communication and presentation skills Adaptable and agile Good interpersonal, partnership and leadership skills (without direct authority of others) Skills That Are Nice to Have: Experience developing and operationalizing a vulnerability management program Experience working with container-based architectures Security and Cloud certifications