Senior Information Security Engineer (Hybrid)

• Suggest strategies, evaluate solutions, design, and implement tools, processes, and controls to validate and ensure that security and privacy are designed into Quorum infrastructure and applications while adhering to policy, compliance, and governance requirements.
• Serve as an internal Subject Matter Expert (SME) to assess cyber threats and to secure the organization.
• Identify gaps in Information Security infrastructure security and privacy capabilities, working with internal teams to remedy and improve our systems and products.
• Perform Blue/Red team exercises against our infrastructure to validate event parsing, alerting fidelity, incident veracity and SOC response.
• Validation of vulnerability mitigation strategies with internal stakeholders
• Ability to lead and participate in the Incident Response team in the event of an incident and make well informed decisions regarding action plans.
• Excellent written and verbal communication skills. Ability to explain and translate complex subject matter to a non-technical audience.
• Hands on experience with core security operations infrastructure technologies like EDR, SASE, WAF, IAM, PAM, Vuln Mgmt., TI, SIEM, etc. and services like MDR, MSSP, Forensics and Incident Response, Attack Surface Management, etc.
• Advise and review architectural designs with a focus on security and privacy of solutions
• Advise business units on project plans and architecture as the subject matter expert for security and privacy.
• Mentor to junior team members and help grow their knowledge and skills
• Support and represent leadership in meetings as needed.
• Act as a subject matter expert on native cloud security tooling such as Defender for Cloud, Conditional Access, AWS Guardduty, Cloudtrail, and Intune security policies.
• And other duties as assigned.

• 5+ years cybersecurity experience
• Experience being a part of or the general operations of a security operations center, incident response team, threat intelligence unit, and/or security engineering or tools teams (integrate, automate, optimize)
• Strong understanding of cloud security; the security controls available, and how to implement them for Azure and AWS
• Experience with real world incidents, understanding of ransomware and other threats, threat modeling, development of architectures and designs, or hands on software development or scripting is a plus
• Strong understanding of attacks, attackers, their tools and techniques, vulnerabilities, and how to model those threats against our business
• Knowledge of governance, risk, compliance, and audit requirements and how to implement them in the security operation, especially for a technology company
• Fluent in English, both written and verbal

• Relevant Bachelors or Master’s Degree are optional but preferred
• Industry certifications are optional but preferred (SANS, etc.)

• Background Check: The successful candidate will need to successfully complete the following clearances: Criminal History Check, Education Verification, Employment Verification, Driver’s License Verification and passport/ID validation.
• Visa Sponsorship: Employment eligibility to work with Quorum Software in the United States is required as the company will not pursue visa sponsorship for this position. The successful candidate will be required to ensure they maintain and renew any visas or permits that grant employment eligibility where applicable.

Quorum Software