Senior Systems Security Engineer

NOTES FROM THE MANAGER

Systems Security

• Looking for someone with deep systems security experience.
• Environment includes:
  • Windows
  • Linux
  • macOS
  • Android
  • iOS
• Covers both desktop and server operating systems.
• Candidate can be strongest in Windows OR Linux. They do not need to be equally deep in both.

Vulnerability Management

• Need experience with a vulnerability management program.
• Tenable experience is relevant, but comparable tools are acceptable:
  • Qualys
  • Rapid7
• Looking for someone who understands the bigger vulnerability management picture, not just how to use a particular tool.

Asset Management / Tracking

• Asset tracking and visibility are important parts of the role.
• Candidates need to understand why asset management matters from a security perspective.
• Lack of sufficient asset-management experience has been a gap.

Endpoint / Security Tools

• Cortex is used, but CrowdStrike experience can translate.
• Exact tool match is less important than having the underlying systems/security knowledge.

Ideal Profile

• Deep systems security background
• Strong Windows or Linux knowledge
• Vulnerability management experience
• Understands asset management/visibility and its importance to security
• Comfortable working across different operating systems
• Strong problem solver
• Interested in getting hands-on with internally developed solutions/code
• Does not need exact experience with every tool in their environment