Enterprise Security Engineer

OPSWAT is a global cyber security company providing solutions for enterprises since 2002 to identify, detect, and remediate advanced security threats from data and devices coming into and out their networks. Trusted by over 1,000 organizations worldwide and with over 30 anti-malware engines, 100+ data sanitization engines and more than 25 technology integration partners, OPSWAT is a pioneer and leader in data sanitization, vulnerability detection, multi-scanning, device compliance, and cloud access control.

OPSWAT. Protecting the World's Critical Infrastructure

**The Position**:
The Enterprise Security Engineer's mission is to defend OPSWAT's corporate assets from all threats through risk reduction. Enterprise Security reduces risk to OPSWAT by advising, implementing, operating, and assuring multiple critical preventive and reactive security controls in tight collaboration with teams and stakeholders across the company.

**Your impact**:
As a Security Engineer on the operations team, you will be entrusted with the crucial responsibility of safeguarding OPSWAT's corporate environment. From our versatile laptop fleet (Mac, Windows & Linux) to our innovative SaaS apps and other Corporate Infrastructure, you will play a vital role in ensuring our success and securing our valuable assets. With a confident and thoughtful approach, you'll build and implement solutions that raise the security bar for our corporate infrastructure. If you love working on security and operations, we are excited to have you join our dynamic team

**What You Will Be Doing**:

- Contribute to designing and implementing solutions that support enterprise-wide security initiatives.
- Design, build, maintain, tune, and enhance the effectiveness of our Enterprise Security controls in a wide range of security domains, including:

- Endpoint Detection and Response (EDR)
- Ransomware Resilience
- Data Loss Prevention (DLP)/Insider Risk
- Conditional Access
- Vendor/Business Process Outsourcing (BPO) Security
- Device Posture and Attestation, Shadow IT
- Threat and Vulnerability Management (TVM)
- Identity and Access Management (IAM)
- Public Key Infrastructure (PKI)
- Perform risk assessments and security assurance (threat modeling, code review as necessary) on a range of systems that support OPSWAT's business operations:

- Internally developed Enterprise Infrastructure Services
- Third-Party Software as a Service (SaaS) solutions
- Network Infrastructure (ZTNA, CASB, VPN)
- Collaborate with our Governance Risk and Compliance (GRC) team to help develop enterprise security standards, guidelines, and policies.
- Drive the remediation of security vulnerabilities identified through assessments.
- Build security automation to secure our corporate infrastructure.
- Evaluate cutting-edge Enterprise Security technology designed to increase our security posture.
- Partner with our product management teams to provide feedback on the products and roadmap.

**What We Need From You**:

- Four-year university degree or college diploma in the field of Information Security, Computer Science, Information Systems, or equivalent experience.
- Expert on Microsoft Product Stack.
- Full-stack knowledge of IT infrastructure including securing: Applications, Databases, Operating systems (Windows, Unix/Linux and Mac), Hypervisors, IP networks (WAN and LAN), Storage networks, CI/CD pipelines, Backup networks and media, and Containers/Kubernetes
- Has working experience in Security Assurance: Penetration Testing, Code Review, and Threat Modeling.
- Direct experience or strong working knowledge of designing IAM technologies and services using: Active Directory, Azure Active Directory, Privileged Access Management, Multifactor Authentication, and Amazon Web Service (AWS) IAM
- Strong working knowledge of IT service management (e.g., ITIL-related disciplines): Asset management, Configuration management, Incident management, Problem management, Change management, and Vendor/Supplier Management.

OPSWAT is an equal opportunity employer. We celebrate diversity and are committed to providing an environment where equal employment opportunities are extended to all employees and applicants, free of discrimination and harassment of any type. All employment decisions are based on individual qualifications, job requirements, and business needs without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other category protected by federal, state, or local laws.

Recruiting Agencies: we do not accept unsolicited resumes from third party agencies for any of our open positions. To submit resumes for our jobs, there must be a recruiting contract approved by our legal team and endorsed by both parties. We are currently not accepting additional 3rd party agencies at this time.