Security Engineer

DreamBox Learning - Bellevue, Washington - Full time

What You'll Need to be Successful:

  • 2 years or more of experience in an information security role
  • Experience designing secure networks, systems and application architectures
  • Experience planning, researching and developing security policies, standards and procedures
  • Broad and detailed experience with computer forensic tools, technologies and methods, including anti-virus software, intrusion detection, firewalls and content filtering
  • Test Automation design, configuration and operation
  • Configuration automation (Chef, Puppet, Ansible)
  • Preference to candidates who have a security certification, such as CISSP, ISSEP, or Certified Ethical Hacker (CEH)
  • Git and various hosted Git implementations (GitHub, BitBucket)

Knowledge:

  • Outstanding interpersonal and communication skills
  • Robust problem-solving skills
  • Knowledge of potential attack vectors such as XSS, injection, hijacking, social engineering, and so on
  • Working knowledge of compliance standards such as FERPA, COPPA, GDPR, and ISO 27000.
  • OWASP (Open Web Application Security Project) Top Ten Risk Factors

Competencies:

  • Intermediate-level expertise with risk assessment methodology and risk analysis preparation
  • Intermediate-level AWS Cloud configuration, particularly monitoring and security components
  • Intermediate-level setup and configuration of vulnerability detection software, such as Nexpose, Nessus, Threat Stack, or AWS Inspector
  • Advanced-level expertise with Microsoft Word and Excel, including templating and style sheet use.

What to Expect:

  • Identify and define system security requirements to develop information security plans and policies
  • Test for security vulnerabilities, up to and including conducting penetration testing
  • Develop and carry out information security plans and policies
  • Develop strategies to respond to and recover from a security breach
  • Prepare and present awareness training to internal staff on information security standards, policies and practices
  • Lead incident response, including steps to minimize the impact and then conducting a technical and forensic investigation into how the breach happened and the extent of the damage
  • Configure and troubleshoot security infrastructure devices
  • Develop technical solutions to automate security testing and audit tasks
  • Stay up to date with latest security technology and trends
  • Perform regular audits and provide reports

Apply for this job

Apply for this job

Role

Operations

Experience Level

Mid Level

DreamBox Learning

We’ve helped over 2 million kids and 75,000 teachers, but our mission is to inspire all students, everywhere, to think differently about math – and love it.

Share this job

Find your

Dream job in edtech

EdSurge Connect Beta matches talented educators, technologists, and business leaders with amazing edtech companies.

Get Matched

Get our email newsletterSign me up
Keep up to date with our email newsletterSign me up