Security Engineer
BCI

Experience: The ideal candidate will bring significant experience in information security roles, demonstrating a deep understanding of secure systems engineering and the ability to drive security programs in large, complex environments. Experience securing MS Azure cloud environments will be important.

Expertise: The candidate should possess advanced knowledge and a passion for cybersecurity. They must have experience assisting with the implementation of security programs and solutions for large, complex environments. Proficiency in Agile/Scrum and DevOps methodologies. Brings experience in MS Azure cloud environments. Proficiency in implementing and integrating security tools, including PAM (Privilege Access Management) and Identity Governance Platforms. Familiarity with zero trust strategies and frameworks. Experience with cybersecurity automation and the integration of best-in-breed security tools.

Needs Assessment: Can work closely with business stakeholders to assess security requirements. Conduct thorough needs assessments, identify areas for improvement, and translate these insights into actionable recommendations. Ability to provide feedback on features and enhancements to improve cybersecurity posture.

Excellence: Strong commitment to excellence and a desire to stay ahead of emerging threats and technologies. Capacity to think critically and sweat the details, ensuring all aspects of cybersecurity operations are thoroughly considered and addressed.

Organization & Planning: Strong organization and planning skills that allow them to be highly productive and efficient. Manages their time wisely and effectively prioritizes multiple competing tasks. Follows through on tasks to ensure changes in technology are communicated effectively. Detail-oriented mindset with a focus on ownership and accountability, understanding the tangible consequences of actions in highly regulated industries.

Results Orientation: Maintains appropriate focus on outcomes and accomplishments. Motivated by achievement and persists until the goal is reached. Conveys a sense of urgency to make things happen. Respects the need to balance short- and long-term goals and is driven by a need for closure.

Communication: Can clearly and articulately convey technical and other information both orally and in writing to others in a manner appropriate to the listener. Writes clearly, accurately, and concisely, composing project, technical and other required documentation as required.   

Change Management: The candidate should be skilled at directing, persuading, and motivating others. They should be able to flex their style to direct, collaborate, or empower as the situation requires. Ability to work effectively in a dynamic environment with high performance standards, adapting to changing priorities and demands.

Relationship Skills: A track record of establishing and maintaining productive relationships. Devotes appropriate time and energy to establishing and maintaining networks. Internally, can engage people across the organization and foster buy-in to new ideas and concepts. Can effectively ‘bridge the gap’ between security and business groups and communicate with both technical and non-technical audiences. 

Mentorship & Leadership: Demonstrated leadership qualities, with the potential to develop future leaders within the team.  Knows how to get team members excited about new initiatives and technologies. Supports learning initiatives for others in the team.

Cultural Fit: Able to thrive in a culture of rigor, discipline, and fiduciary responsibility with a fast pace and high performance standards. Is a relationship builder who takes their time to understand the issues and others’ perspectives before jumping in with ideas. Can learn and add value simultaneously.

Education: Bachelor’s degree in Engineering, Computer Science or a related STEM field. Professional certifications such as GIAC, CISSP, CISM, or equivalent experience are assets.