Total 943 quality assurance engineer job vacancies in Legal / Public / Security category in Malaysia

About the role

The position is part of part of our managed operations team and is responsible for day-to-day management and operations of assigned cybersecurity solutions and platforms in Privilege Access Management.

Responsibilities:

• Lead and drive PAM operations, providing support for assigned projects, including onsite troubleshooting, root cause analysis, incident reports etc.
• Provide guidance to team members, and be responsible in knowledge transfer and training
• Ensure adherence to Security Controls, Policies and Standards in place
• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
• Perform change requests activities per change window allocated, including planning, review, tracking & verification and documentation.
• Ensure that daily operations and tasks are properly completed or followed up.
• Engagement and communication with stakeholders across departments/units to ensure PAM operational effectiveness.
• Escalate issues and liaise with subject matter experts as required to resolve issues.
• Support After-office hours activities and standby requirements as necessary.
• Prepare activities report and documentation.

Requirement:

• Educational background in Information Systems, Cybersecurity or related disciplines.
• At least 3 years of hands-on engineering or operations experience with Privilege Identity Management (PAM)
• Broad understanding of systems, network infrastructure; working experience with databases, LDAP and directory services, application servers, operating systems, and network infrastructure.
• Knowledge in one or more general-purpose programming languages (Perl, Python, PHP, Shell, PowerShell, Windows Scripting, Windows console programs, .Net or Java) will be a plus.
• Certificates such as ITIL Foundations, Microsoft MCSA, CISA, CISSP will be a plus.
• Ability to work independently, under the general guidance.
• Support after office hour and during weekend/public holiday.

About us:At iSelect, we’re passionate about helping Australians reduce their household bills and save money, time and effort. We are Australia’s go-to destination for comparison across insurance, utilities and personal finance products made available from our range of providers. We compare from a wide range of Australia’s leading brands and our highly trained consultants help customers compare, select and save.What you do:As a Senior Security Engineer, you will be leading our security engineering practice, providing thought leadership and technical guidance to ensure our platforms are built and operated in a secure way. You will be accountable for implementing solutions that embed security into how we build products and technology. This includes making collaborative decisions on security controls, design patterns and overall technical strategy.You will have a background in DevSecOps, application security and cloud security engineering and have the technical ability to observe/analyze security engineering/development practices and drive practice maturity and capability uplift. This is a…

Click here to view more detail / apply for Senior Security Engineer

A spin-out of telecom operator MyRepublic, MyRepublic Digital is an end-to-end digital enabler and accelerator that provides companies around the world the technology, skills and expertise needed to create frictionless customer experiences and thriving businesses.

Using a product-led approach, MyRepublic Digital aims to enable, simplify and accelerate digital transformation for aspiring digital brands. Its flagship offering is Encore: a cloud-native, all-digitalplatform-as-a-service that is ready to deploy pre-built with industry best practices and BSS/OSS features.

Role and Responsibilities

The incumbent will be responsible for the systems engineering to maintain the reliability and security of systems supporting a Cloud SAAS platform and some service provider Network Functions.

● Evaluate, integrate, and deploy security tools including Zero-Trust Security, Identity and Access Management, Endpoint Detection and Response, Security Information and Event Management

● Evaluate, integrate, and deploy monitoring tools for Cloud and IT services

● Review system and security logs, create rules and automations to correlate events and incidents, build analysis reports for critical events

● Ensure internal and external compliance audits are completed and due diligence and remediation actions are carried out according to schedule Work with SRE’s and IT Support to test and deploy patches for security vulnerabilities

● Work with CREST-certified VA/PT provider to ensure all assets are scanned and vulnerabilities tracked and remediated

● Maintain Telephony, RADIUS and DNS service uptime of 99.9%

● Design and deploy engineering solutions to provide capabilities including:
○ Monitoring and Alerting
○ Security Lifecycle Management
○ Patching and Integration Testing
○ Infrastructure Orchestration
○ Systems Automation

● Incident Management

● Improve the security, design and reliability of the infrastructure

● Maintain systems documentation

● Accept and meet challenging deadlines

Qualifications

● Degree or Diploma in Computer Science or related field of study

● Experience with the following is preferred:
○ Cloud service providers: AWS /GCP
○ Compliance Standards: ISO27001 / CIS20 / SRII
○ Automation Frameworks: Ansible / Salt
○ Vulnerability Scanners: Accunetix, Tenable
○ WAF/IDS/IPS: Palo Alto / Fortinet / Wazuh
○ IAM: Okta / CyberArk / BeyondTrust
○ Collaboration tools: Slack / Jira / Confluence
○ Source Code Repositories: Gitlab / BitBucket
○ Hypervisors: ESXi / Proxmox
○ Monitoring Tools: Grafana / InfluxDB / Prometheus / Datadog / New Relic
○ Reverse Proxy: NGINX / Traefik

● Strong background in Linux is a must

● Good understanding of Networking

● Ability to write scripts in various languages such as Bash, Python, PHP

● Ability to self-learn

● Well organized, attention to details and able to multitask

● Desire to explore and learn new technologies

What we offer in return:

● Exciting opportunities to create and grow in a rapidly growing organisation that is a disruptor in the telco space.

● Amazing colleagues and culture that encourages you to do your best work while staying authentic and true to yourself.

● A work culture that puts your individual needs at the core: Remote, Hybrid or In-Office – choose a work rhythm that suits you and your team. We focus on outcomes and believe that you can deliver your best work, working anywhere, anytime.

● Wellness first. We believe that wellness goes beyond team celebrations and birthday parties. Our holistic approach to wellness gives you opportunities to recharge, connect and explore, at and outside work. In addition to the standard leave entitlements, we offer:

● 1 day of wellness leave every quarter for you to take or your health and wellbeing, and explore your personal passions.

● 20 days to work from anywhere each year, allowing you more flexibility to explore and connect with your interests while delivering work you will be proud about.

MyRepublic values and behaviour that we look for:

From being the first to launch 1Gbps broadband plans and the first network optimised broadband service for gaming in Singapore, to crafting workplace practices that put wellbeing at its core, our values guide us in everything we do at MyRepublic Digital. It’s the secret sauce that makes us tick. If you espouse the following, we know you would fit in great with us:

● Never Settle: We dream big. We are constantly curious and embrace bold ideas.

● Stronger Together: We create together. We win together, we fail together. We grow together, we celebrate together. We are at our strongest together.

● Empowered to Deliver: We deliver on our commitments. We are empowered to move fast and with confidence to get the right things done.

● We Care: We care for ourselves, one another and our customers. We value authenticity and embrace differences. We create the space to recharge, connect and explore to bring our best selves to work.

We believe that skills, knowledge, and experience can come from a diverse range of life experiences. You may not have ALL the listed requirements for this role but this should not hold back! If you believe that you have what it takes for this position, are willing to learn, and you identify with the values and mission of MyRepublic Digital, we would love to hear from you. We celebrate diversity and look forward to hearing from a diverse group of applicants. We do not discriminate on any factor in our hiring process.

Insyghts Security is seeking a highly skilled and motivated Cyber Security Engineer to join our dynamic team. As a Cyber Security engineer, you will have the unique opportunity to work directly with our clients, providing expert guidance and support to ensure the security of their systems and data. This role offers the chance to immerse yourself in diverse environments, learning from both our esteemed clients and our experienced team at Insyghts Security.

Key Responsibilities

As a Cybersecurity Engineer, you will be responsible for, but are not limited to:

• Reviewing the design and architecture of our customers’ environments against industry security best practices and guidelines such as NIST 800-53, ISO27001, and CIS Top 20 Controls
• Aligning client’s business with relevant information security frameworks while developing and executing security strategy
• Identifying, proposing, and implementing solutions for the strengthening of internal cybersecurity capability in line with cybersecurity strategy
• Implementing IT Security Policy and managing security implementation projects.
• Providing hands-on review, configuration, and hardening of customers’ information assets (e.g. security and network devices, workstations, servers, applications and middleware) against security best practices and guidelines such as the CIS Benchmarks
• Manage and execute complex projects such as the integration and upgrade of security solutions (firewalls, proxies, web application firewalls, DDoS, End Detection and Response, Identity and Privilege account management solution, SIEM, vulnerability management solutions, etc)
• Evaluation and maintenance of security system plans and procedures to safeguard internal information systems
• Detecting and mitigating threats, managing endpoint protection while implementing infrastructure to monitor, detect, alert, and mitigate cyber threats.
• Supporting the cyber incident response team while performing detailed investigation for security-related incidents.

Experience:

• Bachelor's degree, preferably in computer science or information systems, or equivalent work experience. Minimally diploma for junior role.
• Minimum of two years direct Information and Cyber Security experience in a security analyst, engineer, architect, consultant, or a similar role
• Strong background in infrastructure and security architecture including deep knowledge of IT network and security (secure LAN, WAN, vLAN, MPLS, and secure network zoning and restricted network design) and cloud-based technologies
• Strong background and working knowledge of major cloud service and systems, such as AWS, Azure, etc
• High proficiency in a variety of operating systems such as Unix/Linux/Mac/Windows operating systems
• Strong background in Network Engineering including a deep understanding of Windows Server architecture, Windows Virtualization, Networking, Backup Solutions, and Disaster Recovery
• Strong knowledge and experience designing and implementing technical security solutions such as secure remote access, firewalls, web proxy, and identity management solutions both internally and within cloud provided services
• Proven understanding of the current vulnerabilities, response, and mitigation strategies used in cybersecurity
• Experience of designing and incorporating technical security controls that align to ISO 27001, NIST CSF, or NIST 800-53
• Strong oral and written communication skills, including a demonstrated ability to prepare quality documentation and presentations for technical and non-technical audiences
• CCNA, MSCA, MSCE, or other certifications demonstrating core technical skills
• Certifications such as CISSP, GSEC, CEH or CISM highly desired

What to expect

• Friendly and Family-like culture with many chances to learn
• Medical Benefits
• Annual Wage Supplement and Performance Bonus
• Handphone & Transport allowance (depending on your level)

Static & Security Engineer
Reading
£39,000

Are you an Fire & Security Engineer looking for first year earnings over £48k, every other Friday off, additional training and access to varied progression routes?

Our client operates in over 120 countries across the World and can boast some of the UK's most prestigious industrial and commercial contracts, they are rebound for their excellent packages including additional training, over 50 days of annual leave and high frequency of overtime available.

You will be required to join a dedicated team responsible for installing, testing and maintaining various CCTV, access control, fire detection and alarm systems within an industrial static site.

£35,000 Base Salary
£4,000 Site Allowance
Bonus On Completion Of Security Clearance
Every Other Friday Off
Monday-Friday 07:45-16:30
Frequent Optional Overtime
25 Days Paid Holiday (33 including Bank Holidays)

Search is an equal opportunities recruiter and we welcome applications from all suitably skilled or qualified applicants, regardless of their race, sex, disability, religion/beliefs, sexual orientation or age.

Company Description

Our client’s mission is to develop the lowest-power semiconductor solutions to enable intelligent devices everywhere by developing the lowest-power semiconductor solutions to drive a more energy-efficient, sustainable, and data- driven world. They have helped leading manufacturers worldwide develop products that last weeks on a single charge (rather than days), while delivering a maximum feature set in compact industrial designs. Their goal is to take Artificial Intelligence (AI) where it has never gone before in mobile and portable devices, using their advanced ultra-low power system on chip (SoC) solutions.

Job Description

• 
  
• We are seeking a talented and motivated Senior Staff Engineer, Embedded Security to join our team and play a key role in advancing the security offerings for the customers.
• Develop and port open source embedded security frameworks (e.g., Trusted Firmware for Microcontrollers).
• Secure BootROM software development in support of Trusted Execution Environments (TEE).
• Support of PSA and other security certifications.
• Test and verification of TEE and support in customer builds.

Requirements

• Bachelor of Science/Master's (Electrical Engineering, Computer Engineering, or Computer Science) with 10+ years of Embedded Software development experience with embedded systems/real-time environments (bare metal and RTOS).
• At least 5 years' experience working on embedded security, cryptography, and secure boot.
• Experience with Arm chipset and firmware security (Trustzone, secure boot, and Cryptocell).
• Experience with Arm Trusted Firmware for Microcontrollers (TF-M) porting and support).
• Experience with development in embedded C and assembly language with a focus on system initialization.
• Experience with at least one MCU IDE on Windows from ARM/Keil, IAR, Eclipse or others.
• Knowledge of cryptographic algorithms and protocols include Public Key Infrastructure (PKI).
• Understanding of software testing and test automation principles and defect management practices.

Responsibilities:

• Manage and operate the IT Security Protection System which includes liaising with Maintenance Contractor to address technical & security issues and Health Checks.
• Manage and investigate Events of Interests and security vulnerabilities to identify early indicators and work with the respective team to address them.
• Ability to deploy, configure and fine-tune security policies as well as performing threat hunting to proactively response to potential cyber threats.
• Review and enhance IT security policies, procedure and documentations with respect to industry standards and best practices.
• Facilitate and support (internal and external parties) on Cyber Security Incident management and response.
• Assist in all internal & external IT audits. Follow-up with the respective Risk Owners to remediate audit findings.
• Be on standby for any critical security alerts and incident management after office hours.

Requirements:

• Degree in Information Technology or Information Security or related discipline.
• 3 years of working experience in Cyber Security. Having good Knowledge in Cyber Security Management, IT Compliance and/or Risk Management.
• Hands-on experience with Windows or Linux OS.
• Experience on Microsoft Azure Cloud Security technologies (MS Sentinel, MS Defender...etc) as well as other Enterprise Security Appliances; such as Privileged Access management & Vulnerability Management tools.
• Familiar with modernised A.I and SecOps tools.
• Familiar with ISO27001 and/or PCI Data Security Standards.
• Security Screening will be required for potential candidates.

To apply, please visit www.gmprecruit.com and search for Job Reference: 23838

To learn more about this opportunity, please contact Yingying at yingying.lai@gmprecruit.com

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA Licence: 11C3793 | EA Personnel: Lai Yingying | Registration No: R1110239

Company Profile

Julian Grey’s client is a Singapore based solution provider for high quality IT security products to value add to their MNC clients & channel partners and has been in the market for 25 years. With a team of more than 200 highly experienced professionals, the company is looking for individuals who are passionate about the IT security industry to join their rapidly expanding team.

Job Responsibilities

· Possesses the ability to troubleshoot, upgrade and maintain systems

· Liaise with vendors to ensure resolution of incidents

· Knowledgeable in configuration and fine tuning of SIEM

· To take charge of design, implementation and management of new systems

· Perform coaching to Analyst on the use-case and functions of systems

The Ideal Candidate

· Degree in Information Technology, Computer Engineering or equivalent

· Minimally 2 Years of working experience as a SOC Engineer with hands on SIEM experience with case management tools administration

· Sans 400 Certified will be advantageous

· Experience in setup and writing of SIEMS parsers (Program)

· Experience in provision and interpretation of log and network packet data

- SNARE, CEF, PCAP and NetFlow

· Knowledgeable in Internet concepts such as TCP/IP, DNS, HTTP

· Experienced in Unix/Linux/Winders administration, storage & backup system, virtual machine, network & security management

· Knowledgeable about security threat & attack counter measures

· Advantageous to have skills at system management level on the SIEMS, Network Forensic System and Breach Detection System

Follow us for more updates, interview tips!

https://www.instagram.com/juliangreygroup/

https://www.linkedin.com/company/juliangreygroup/

https://www.facebook.com/juliangreygroup/

Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Quek Jian Wei

Reg No. R22110928

Julian Grey Corporate Advisory Pte. Ltd.

EA License No: 19C9568

• Conducting maintenance service, commissioning of alarm systems
• Address to customer request on alarm and card access systems

Requirements:

• Basic Security certified
• At least 2 years of working experience
• Possess valid class 3 driving license

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

Purpose and Job Summary

ORIX USA is seeking a Senior Cyber Security Engineer to join our growing cyber team.  The ideal candidate will have a broad expertise in security standards, practices, tools and technologies.  They will work closely with other technical, incident management, legal, compliance, business, and cyber personnel to protect the organization by employing a range of technologies and processes to prevent, detect and manage cyber threats.  The Senior Cyber Security Engineer will identify, monitor, assess, and remediate any threat posed by cyber actors.  They will provide strategic assessment, tactical analysis and recommendations for cyber risk reduction operations.

Essential Duties & Responsibilities

• Implement cyber security processes and procedures to ensure cyber security threats are mitigated

• Participate as a core member of the incident response team

• Appropriately inform and advise management on incidents and incident prevention

• Develop policies and/or advocates for changes in policy that support organizational cyberspace initiatives or required changes/enhancements

• Document processes related to cyber security

• Perform cyber risk assessments to identify risk, recommend and implement risk reduction measures

• Provide leadership, training, and mentoring to junior team members

• Work collaboratively with cyber, technical teams, and business functions

• Lead implementation efforts for various security technology improvements and initiatives

• Develop a deep understanding of the intent, objectives, and activity of cyber threat actors through threat hunting and threat modeling

• Static and dynamic threat analysis

• Applies knowledge of data, information, processes, organizational interactions, skills, and analytical expertise, as well as systems, networks, and information exchange capabilities to manage acquisition programs.

• Executes duties governing hardware, software, and information system acquisition programs and other program management policies

Education, Skills, & Experience

• Bachelor of Science in Computer Science, System/Computer Engineering, Cyber Security, or Information Security is preferred. Five (5) years of cyber work experience may be substituted in lieu of a Bachelor’s Degree.

• Passionate about Cyber Security

• Excellent organizational, communication, and interpersonal skills

• Customer service and quality focused with proven process improvement skills

• Strong understanding of cyber threat landscape, vulnerability management, and NIST CSF

• Innovative problem solving, research, and analytical skills

• Ability to multi-task and prioritize work effectively

• Strong understanding of data security, data classification, and data loss prevention

• Highly motivated self-starter

• Strong sense of ownership and driven to manage tasks to completion

• Related certifications: Security+, CEH, CISM, or CISSP a plus

                                                                                                                              

ORIX USA is an equal opportunity employer, providing equal employment opportunities (EEO), and is committed to diversifying its workforce. All employees and applicants for employment will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, sexual orientation, gender identity or expression, pregnancy, protected veteran status or other status protected by law. This policy applies to all terms and conditions of employment.

About the CompanyDavidson Technology are currently working with a reputable MSP who have offices based in Canberra.We are seeking to appoint a Cyber Security engineer to join on a permanent basis.About the RoleAs the Cyber security engineer, you will fully grasp the requirements of your role, and collaborating closely with the Senior Cyber Security Engineer. Your duties will include upholding our company's vision and values, providing exceptional support to team members, and delivering top-notch customer service to both internal and external stakeholders. In this role you will be proactive, enthusiastic, and focused on achieving results. You will have experience in handling both fundamental and advanced cyber security technologies within a business setting. Key responsibilities includemeeting KPIs set by the Technical Services Manager and Senior Cyber Security Engineer, addressing, and resolving designated incidents, and contributing to audit and remediation projects.About YouTo be successful for this role, you will be able to demonstrate: Strong understanding of Current…

Click here to view more detail / apply for Cyber Security Engineer

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

• IT / Cyber Security Exp
• Azure Cloud Security
• Project Management

Job Scope:

• To deploy, configure and fine-tune security policies and configuration, and perform threat hunting to proactively response to potential cyber threats
• To configure security incident response workflow
• To manage cloud resources through the security posture management as defined by the Microsoft Cloud Security benchmark
• Manage and operate the IT Security Protection System including liaison with Maintenance Contractor to address technical & security issues and Health Checks
• Manage and investigate Events of Interests and security vulnerabilities, to identify early indicators and work with the respective team to address them
• Facilitate and support on Cyber Security Incident management and response
• Enforce IT Security Policy compliance including assessment of security posture of the organisation’s IT assets and recommending appropriate measures and controls to mitigate security threats within the organisation
• Assist in IT audits and follow-up with the respective Risk Owners to remediate audit findings
• Review and enhance IT security policies, procedure and documentations with respect to industry standards and best practices
• Facilitate, plan and conduct Cyber Security Awareness Training, including Cyber Security Exercises
• Any other ad-hoc duties as assigned

Requirements:

• Possess a Degree in IT / Information Security or related discipline
• Possess minimum 3 years of working experience in Cyber Security field
• Good knowledge in Cyber Security Management, IT Compliance and/or Risk Management
• Ability to configure security incident response workflow using Microsoft Azure Sentinel
• Hands on experience on managing cloud resources through the security posture management as defined by the Microsoft Cloud Security benchmark
• Hands-on experience with Windows or Linux OS
• Familiar with ISO27001 and/or PCI Data Security Standards
• Hands-on experience on Microsoft Azure Cloud Security technologies (MS Sentinel, MS Defender for Cloud...etc) as well as other Enterprise Security Appliances; such as Privileged Access management & Vulnerability Management tools
• Familiar with modernised A.I and SecOps tool
• Possess good project management and report writing skills
• Excellent analytical, communication and written skill
• Able to work under pressure and tight timeline
• Team player who is able to work independently
• Be on standby for any critical security alerts and incident management after office hours

To apply please click on the APPLY NOW button or email your resume with the following details inside your resume for faster processing:

• Reason for leaving each past & current employment

• Salary drawn for each past & current employment

• Expected Salary

• Earliest availability date

We regret only shortlisted candidates will be notified. By submitting any application or résumé to us, you will be deemed to have agreed and consented to us collecting, using, retaining and disclosing your personal information to prospective employers for their consideration.

Yoong Poh Feng

EA License | 14C7092

EA Registration Number | R1105076

We are looking for an experienced Software Engineer to take on the most sophisticated security challenges of NVIDIA's Private Cloud and On-Premise Services. NVIDIA is the leading artificial intelligence computing company and paving the way with innovations in self-driving cars, machine learning, supercomputing, gaming and visualization. NVIDIA gives automakers, research institutions, cloud providers, large companies and start-ups the power and flexibility to develop and deploy breakthrough artificial intelligence systems. To support this effort and all our developers, we deploy internal services and processes. It our job to make sure those services are secure and easy-to-use. We strive to keep growing our company with the most thoughtful engineers! Do you have the skills and dedication to join our team and build novel security solutions?

What you will be doing:

• Identify, promote, and implement new features to our engineering processes, documentation, tools, and generally improve our security posture for the organization

• Participate in the full development lifecycle of our software applications, through requirements, proof-of-concepts, design, development, test, delivery, support, and maintenance of security services

• Work directly with internal product teams to tackle complex security problems and to streamline security processes across the whole organization

• Provide technical support for high-urgency requests, within SLA, such as zero-day vulnerability remediation's

• Communicate efficiently with management, peers, and partners, through reports, presentations, metrics and other documentation

What we need to see:

• Bachelor's Degree (or equivalent experience) in Computer Science or related field with 7+ years of relevant Software Development experience

• Ability and motivation to learn new technologies quickly and with minimal support and mentorship, in order to stay up to date on new tools & techniques in the information security space.

• Experience in building end to end applications, infrastructure, and automation frameworks at large scale in a distributed environment, using programming languages like Java, Python, and/or Go and technologies such as scalable databases or datastores (MySQL), container deployments & orchestration (Docker, Kubernetes), REST APIs, and cloud services (AWS, Azure, GCP)

Ways to stand out from the crowd:

• Develop software using the industry best development practices, including coding standards, code reviews, source control management, build processes, testing, and operations, with experience in following an Agile SDLC and using associated tools, such as JIRA

• Communicate effectively both verbally and in writing, with strong presentation abilities

• Develop solutions using the Infrastructure As Code paradigm with tools such as CloudFormation, Terraform, Flux

• Experience with Security compliance processes (such as CIS, or PCI)

NVIDIA is widely considered to be one of the technology world’s most desirable employers. We have some of the most forward-thinking and hardworking people in the world working for us. If you are creative and passionate about developing cloud services we want to hear from you!

We are looking for a Senior Information Security Engineer to scale and automate integrating security into the software development lifecycle and helping teams prioritize their security findings. This includes enabling the identification, tracking, and remediation of vulnerabilities in systems, as well as educating engineers, product management, and program management on security threats. This role also entails working closely with development teams, infrastructure teams, and other collaborators to build a culture of security and continuous improvement!

What you'll be doing:

• Developing and implementing innovative automation solutions for large-scale and highly sophisticated security-related activities

• Running pipeline integrations with container and static code scanners and triaging user issues

• Leading discussions, leverage domain expertise, and collaborating with partner teams across Omniverse to influence decision-making processes

• Staying ahead of emerging threats and vulnerabilities and helping develop processes to address them

• Collaborating with partner teams to establish and report on key performance indicators related to vulnerability scans

What we need to see:

• Bachelor's degree in computer science or information technology, or equivalent experience

• 7+ years of experience in software development or related field, with a focus on automation.

• Experience with static and container scanning tools such as Checkmarx, Coverity, Snyk, or Anchore

• Full-stack engineer with strong hands-on system integration, software development, and workflow automation skills across traditional on-premise and modern cloud environment

• Ability to develop custom integration, tooling and automation in supporting DevOps within CI/CD environments such as Gitlab CI, Jenkins, or TeamCity

• Expert in programming Python and using Python ecosystem tools

• Strong analytical and problem-solving skills

• Familiarity with DevOps and agile development methodologies

Ways to stand out from the crowd:

• Experience with security automation and orchestration tools, like Terraform and Ansible

• Hands-on experience with cloud security tools and technologies, such as AWS IAM or Azure AD

• Hands-on background in Vault capabilities, with the ability to customize it for different patterns of workloads and workflows

• Experience with API infrastructure and gateway, microservices architecture, ServiceMesh technology and policy-as-code solutions

• Previous experience in solving security challenges in a Hybrid cloud environment (workloads spread across on-premise datacenter and public cloud such as AWS)

With highly competitive salaries and a comprehensive benefits package, NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most hard-working and dedicated people on the planet working for us and, due to unprecedented growth, our special engineering teams are growing fast. If you're a creative and autonomous engineer with a genuine passion for technology, we want to hear from you.

The base salary range is 160,000 USD - 304,750 USD. Your base salary will be determined based on your location, experience, and the pay of employees in similar positions.NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.