About the role
In this crucial role, the Senior Security Engineer will be responsible for ensuring our cloud security tools are providing expected coverage and configuration guidance addresses security concerns while allowing for operational efficiency. They will maintain cloud security tool configuration guidance to help ensure proper deployment throughout the organization. This role will work with vendors to follow tool roadmaps, understand impact of new features, design and execute lab tests of features and updates, and keep stakeholders informed of any necessary changes. They will also work closely with operations and validation teams to ensure solutions are minimizing impact and addressing any identified gaps. Additionally, this role will contribute to security tool reviews by providing operational context and experience to discussions on tool requirements and review processes. Success in this position requires the ability to work well in a team, strong problem-solving and analytical skills,
providing subject matter expertise to external teams, and an unwavering commitment to improving Sony's security posture. This position reports to the Senior Manager, Security Capability – Security Validation.
[Responsibilities and Duties]:
- Maintain configuration standards of cloud security toolset, which includes a combination of commercial software and cloud native security services.
- Assess how tools are performing within the operational estate. Identify issues affecting coverage, effectiveness, and standardization.
- Optimize our toolset and configuration standards by balancing between security and operational requirements.
- Support incident prevention and response by translating TTP and IOC information into security solution configuration changes.
- Work with security validation teams to identify gaps in our security toolset. Propose modifications to our configuration standards based on input.
- Work with vendors to ensure our security controls provide coverage for attacks both holistically and on a per-tool basis, following a defense in depth approach.
- Closely follow commercial tool roadmaps, understand impact of new features, keep stakeholders informed, test applicability for our estate and push relevant changes towards completion.
- Design and execute lab tests to reproduce operational scenarios and propose improvements to the effectiveness of our configuration standards.
- Participate in product reviews by injecting operational context and experience into the requirements setting and actual review process.
- Support the SOC during incidents to provide root cause analysis and subject matter expertise regarding tool detection and prevention.
Any Degree
[Keywords]
Prisma Cloud, Conformity, Configuration Guidance, Remediation, AWS CLI, Splunk SPL, Terraform, Cloudformation, Cybersecurity, Network Security, Threat Analysis, MITRE, Python, Splunk, SIEM, Firewalls, Intrusion Detection, Endpoint Controls, Project Management, Risk Assessment, Compliance, Auditing