Security Engineer – Corporate Security

🕒 vor 2 Monaten

🗽 New York – Remote

🗽 New York – Remote

💵 $200.000 - $255.000 / Jahr

⏰ Vollzeit

🟡 Mittelstufe

🟠 Senior

👮‍♂️ IT-Sicherheitsingenieur

🦅 H1B-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit H1B-Visa gesponsert.

👻 Geisterscore 23%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Cape

WebsiteLinkedInAlle Stellen

11 - 50 Mitarbeiter

📡 Telekommunikation

Telecommunications

Cape ist das datenschutzorientierte Mobilfunknetz.

Beschreibung

• Design, implement, and manage security controls and policies across corporate IT systems, focusing on the confidentiality, integrity, and availability of employee, customer, and business data. • Own and mature identity and access management (IAM/SSO/MFA), endpoint security (EDR, MDM), and email/network security (phishing defense, DLP, firewalls, VPN) across the organization. • Perform comprehensive security assessments of corporate systems and vendors to identify vulnerabilities, assess risk, and recommend actionable mitigation strategies. • Establish governance, guardrails, and monitoring for emerging employee tooling, including the associated data-handling, access, and third-party risks. • Own the vulnerability management lifecycle across the corporate fleet: scanning, risk-based prioritization, remediation and patch SLAs, and closure tracking across endpoints and internal systems. • Lead security awareness and phishing simulation programs to build an organization-wide culture of security. • Contribute to compliance and audit efforts as needed, lending security context where it helps the business move faster. • Assess and manage third-party/vendor security risk, including security questionnaires, contract reviews, and ongoing vendor monitoring. • Assist in running and addressing findings from penetration tests, red team exercises, and internal audits, ensuring prompt and effective remediation. • Stay informed about the latest security threats, vulnerabilities, and compliance mandates affecting corporate environments; provide strategic guidance on technologies and best practices. • Investigate security incidents and insider-threat concerns in partnership with HR, Legal, and IT as needed. • Raise the security bar across the company by mentoring engineers and partners on secure practices, fostering a culture of security awareness and continuous improvement. • Collaborate with stakeholders to integrate security requirements effectively into IT projects and broader business initiatives.

🎯 Anforderungen

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience). Advanced degrees or certifications (e.g., CISSP, GIAC, Security+, CISM) are advantageous. • A minimum of 5 years of experience in information security, with meaningful experience across corporate/IT security domains (identity, endpoint, network, GRC). • Deep understanding of enterprise identity providers and SSO/MFA platforms, endpoint/EDR tooling, MDM platforms, and email security tooling. • Working knowledge of common compliance frameworks (e.g., SOC 2, ISO 27001). • Familiarity with government/public-sector security frameworks (FedRAMP, FISMA, NIST SP 800 series, CJIS) is a plus, given Cape's government-facing customer base. • Working knowledge of consumer privacy regulations (GDPR, CCPA, and other regional privacy laws) as they apply to handling customer data. • Exposure to secure software development lifecycle (SSDLC) practices and partnering with engineering on secure design reviews. • Proficiency in scripting or automation (Python, shell scripting, or similar) to streamline security operations and reporting. • Familiarity with vendor/third-party risk management processes and tooling. • Solid knowledge of network security, encryption technologies, and secure business-system configuration. • Excellent analytical skills for identifying and mitigating complex security vulnerabilities and risks. • Strong communication and leadership abilities, capable of working collaboratively across teams and effectively conveying technical information to non-technical stakeholders. • Organized and able to manage multiple priorities in a dynamic, fast-paced environment.

🏖️ Vorteile

• 401(k) match • 100% coverage of medical, dental, and vision premiums for you and your dependents • 12 weeks paid parental leave (for all parents, no waiting period) • Stipends for • Family-forming needs • Gender-affirming care • Unlimited PTO