Internet Storm Center

Job Description

Our Information Security Team partners with our technical and business units to perform risk assessments, analyze and assess risks, remediate weaknesses, and validate work efforts in support of our solutions for our business problems. Using cutting edge technology to put it into action, this team helps all of us at Ramsey secure our most sensitive data.

As a Senior Information Security Engineer on the Ramsey Information Security team, you will be providing insights and solutions that will impact the lives of future generations.

What Winning Looks Like:

Perform cloud security architecture reviews.
Perform application security architecture reviews.
Perform threat modeling.
Educate non-security personnel in security focus areas and concepts.
Perform incident response activities at a high degree of return to business as usual.
Perform risk management activities to share current state.
Assess vendors during the procurement process to identify risk and recommend work efforts.
Perform vulnerability management activities to drive remediation.
Skills Needed to Win:

Ability to apply cybersecurity and privacy principles to company initiatives.
Ability to identify systemic security issues based on the analysis of vulnerability and configuration data.
Ability to answer questions in a clear and concise manner.
Ability to ask clarifying questions.
Ability to communicate complex information in a well-organized manner through verbal, written, and/or visual means.
Ability to conduct vulnerability scans and recognize vulnerabilities in security systems.
Ability to effectively respond to an information security event and/or incident.
Ability to facilitate small group discussions.
Ability to prepare and present briefings.
Ability to produce technical documentation.
Ability to dissect a problem.
Ability to apply critical reading/thinking skills.
Ability to ensure security practices are followed throughout the acquisition process.
Ability to function effectively in a dynamic, fast-paced environment.
Nice-to-Haves:

Network penetration testing
Application penetration testing
Knowledge in cloud security architecture
Programming and/or script writing skills
Experience with SIEMs, WAFs, SAST/SCA tools, vulnerability scanners, EDRs, email protection, etc.
Certifications such as: AWS Solution Architect, AWS Certified Security, CompTIA Cloud+, Certified Cloud Security Professional (CCSP), Certificate of Cloud Security Knowledge (CCSK), GIAC Cloud Security Automation (GCSA), OffSec Certified Professional (OSCP), OffSec Experienced Penetration Tester (OSEP) , OffSec Web Assessor (OSWA), OffSec Web Expert (OSWE), GIAC Penetration Tester Certification (GPEN), GIAC Systems and Network Auditor Certification (GSNA), GIAC Web Application Penetration Tester (GWAPT), ISC2 CISSP, etc.
It's a calling, and we're on a mission to change lives. Join the crusade! Apply now.

EOE, including disability/vets