Lead AWS Security Engineer

State Farm•Richardson, TX

3d•Hybrid

About The Position

Being good neighbors – helping people, investing in our communities, and making the world a better place – is who we are at State Farm. It is at the core of how we operate and the reason for our success. We're moving with urgency to become a Next Gen Good Neighbor, with technology that strengthens human connections and enhances the customer experience. As an employee, you'll spend less time navigating systems and more time applying judgment, empathy, and expertise in the moments that matter most. Qualified candidates must live within a 180-mile radius of a hub location listed below and should plan to spend time working from home and some time working in the office as part of our hybrid work environment. HUB LOCATIONS: Bloomington, IL or Richardson, TX Applicants for this position are required to be eligible to lawfully work in the U.S. immediately; employer will not sponsor applicants for U.S. work authorization (e.g. H-1B visa) for this opportunity.

Requirements

6 plus years experience in application/infrastructure development and support in AWS
Experience with various software development tooling and techniques (e.g. Python, GitLab, Terraform)
Knowledge of information security industry standards and practices
Current threats and trends impacting the information security threat landscape
Passion for solving problems
Strong verbal and written communication skills
Ability to thrive in a highly collaborative agile team environment
Ability to quickly adapt to a changing environment

Nice To Haves

Experience using cloud native container services
Relevant information security or public cloud certification(s)
Experience creating and supporting application dashboards
Experience troubleshooting applications via log review

Responsibilities

Help maintain and enhance a python-based detection tool, hosted in the cloud.
Partner with technical teams across the enterprise to develop and test cloud-based detection rules.
Research new cloud services and determine new detection rules.
Communicate change to cloud-based vulnerability management. This could be new detections, expanding the scope of monitoring, etc.
Participate in rotating on-call assignments.