DevSecOps Engineer I

Northwestern Mutual • New York, NY

4d • Hybrid

About The Position

Northwestern Mutual is looking for enthusiastic technologists who want to grow their career in DevSecOps. You’re the right fit if you love to solve problems and are always striving to learn new things. We’re looking for self-motivated and self-driven engineers who are passionate about what they do and love cybersecurity. Your knowledge in application security, DevSecOps practices, and cloud technologies will be instrumental in further maturing our application and cloud security posture throughout the Enterprise. In this position, you will work with cross-functional teams across a set of diverse technologies to manage application security tools with an automation-first mindset. You will work in an agile and innovative environment, solving complex problems and collaborating with architects and engineers to ensure the safety and security of Northwestern Mutual's applications.

Requirements

• Bachelor’s degree with an emphasis in Computer Science, Computer Engineering, Software Engineering, MIS, or related field.
• Highly technical and analytical hands-on experience in prior professional, educational, or personal projects.
• Understanding of networking concepts such as DNS, IP, NAT, VLANs, subnetting, etc.
• Experience with both Windows and Linux operating systems. Including familiarity with the command line.
• Understanding of the OSI Model, web, and network protocols such as TCP, UDP and HTTP/S.
• Competency with one or more scripting/programming languages such as Python, JavaScript, Java, Ruby, Go, PowerShell, Bash, C#, C/C++, etc.
• Fundamental understanding of cryptography controls and underlying concepts to secure data.
• Ability to independently identify and resolve issues through effective problem-solving skills.
• Track record of acting with integrity, taking pride in work, seeking to excel, being curious, and adaptable.
• Strong written and verbal communication skills with the ability to interpret and fully explain the impact of vulnerabilities as well as any recommended remediation to multiple knowledge levels.

Nice To Haves

• Adaptive Communication (NM) - Formulates strategies to be used to convey complex information about services, products, systems, or processes to targeted audiences; communicates and liaises between technical and non-technical audiences.
• Customer Centricity (NM) - Applies a customer first mindset to design and continuously improve solutions, systems, processes, and services that support enterprise strategy, impact critical business outcomes, and drive organizational success.
• Data Security (NM) - Ensures customer privacy, confidentiality, and appropriate access to PII, PHI, and other individual private data. Assures adherence to legal/regulatory requirements, including but not limited to, HIPAA and product specific knowledge. Ensures practices, policies, and procedures are aligned to legal requirement for data management.
• DevOps (NM) - Applies continuous integration and delivery to implement applications and services at a higher velocity.
• Scripting & Integration (NM) - Applies scripting knowledge to automate and integrate different transactional systems to carry out a task or automation; uses systems that facilitate or automate one or more business application solutions, including records maintenance, inventory management, process analytics, and general admin.
• Security Practices (NM) - Undertakes best practices of technologies, policies, and processes designed to protect networks, devices, programs, and data from attack, damage, or unauthorized access.

Responsibilities

• Assist in the analysis of vulnerabilities as directed.
• Assist in engineering vulnerability management platform for reporting and automated governance.
• Provide vulnerability metrics to leadership through the creation and running of custom queries.
• Assist with reporting requirements and regulatory information gathering.
• Maintain and build out vulnerability scanning practices.
• Maintain configuration control of vulnerability management, CloudSec and AppSec platforms and tools; coordinate upgrades and other maintenance activities as directed.
• Automate manual tasks through scripting.

Benefits

• We believe in fairness and transparency. It’s why we share the salary range for most of our roles. However, final salaries are based on a number of factors, including the skills and experience of the candidate; the current market; location of the candidate; and other factors uncovered in the hiring process. The standard pay structure is listed but if you’re living in California, New York City or other eligible location, geographic specific pay structures, compensation and benefits could be applicable, click here to learn more.
• Grow your career with a best-in-class company that puts our clients' interests at the center of all we do.
• Northwestern Mutual is an equal opportunity employer who welcomes and encourages diversity in the workforce.
• We are committed to creating and maintaining an environment in which each employee can contribute creative ideas, seek challenges, assume leadership and continue to focus on meeting and exceeding business and personal objectives.
• At Northwestern Mutual, we believe relationships are built on trust. That our lives and our work matter. These beliefs launched our company over 160 years ago. Today, they're just a few of the reasons why people choose to build careers at Northwestern Mutual.
• We celebrate and support our differences for the benefit of our employees, our products, and our community.
• All qualified applicants will receive consideration for employment without regard to race, color, religion, gender identity or expression, sexual orientation, national origin, disability, age or status as a protected veteran, or any other characteristic protected by law.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level