Infrastructure Security Engineer

The Pokémon Company International•Bellevue, WA

7d•Hybrid

About The Position

The Pokémon Company International manages the Pokémon property outside of Asia and is responsible for brand management, licensing and marketing, the Pokémon Trading Card Game, the animated TV series, home entertainment, and the official Pokémon website. Pokémon was launched in Japan in 1996 and today is one of the most popular children’s entertainment properties in the world. Learn more online at corporate.pokemon.com and pokemon.com . Develops and executes security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based systems. Maintains hardware, software and network firewalls and encryption protocols. Administers cybersecurity policies to control physical and virtual access to systems. Performs network security audits and testing and evaluates system security configurations to ensure efficacy and compliance with policies and procedures. Provides information to management regarding impact on the business caused by theft, destruction, alteration or denial of access to information and systems.

Requirements

Five (5) to seven (7) years of relevant professional experience or a demonstrated equivalent level of expertise securing enterprise IT and OT network environments and hybrid cloud systems .
Bachelor's degree in a related field or a demonstrated equivalent level of applicable experience.
Strong background in technical engineering and architecture, such as infrastructure/cloud engineering.
Proven ability to build partnerships and collaboration between stakeholder teams.
Strong communication skills and ability to outline security risks to senior leadership.
Experience managing security vendors and managed services providers.
Strong experience in Incident Management, and Incident Response planning.

Nice To Haves

Information Security certifications (CISSP, SANS GIAC, CISA, etc.) a plus.

Responsibilities

Administers Information Security policies to control access to systems.
Performs infrastructure security audits and testing and evaluates system security configurations to ensure efficacy and compliance with policies and procedures.
Institutes technical controls to effectively reduce the risk of network-based security vulnerabilities, including drift-resiliency, network segmentation gaps, and web-facing threats
Fields tactical and initial architectural security questions from TPCi IT staff.
Respond and investigate cybersecurity incidents, which may be off-hours and on a scheduled rotation.
Research and evaluates Information Security threats and performs root cause analysis.
Designs guardrails, IaC policies, drift detection, service mesh standards.
Collaborate with the Information Security team to ensure successful completion of our roadmaps and initiatives.
Integrate security testing and controls into different phases of teams’ development lifecycles.
Provides information to management regarding impact on the business caused by theft, destruction, alteration or denial of access to information and systems.
Utilize agile methodology by making iterative progress toward achieving individual, team, and organizational objectives.