Lead, Infrastructure Security Engineer

Prudential Financial • Newark, NJ

18h

About The Position

As a Lead, Infrastructure Security Engineer in Security Services Data protection, you will partner with product owners, tech leads, designers, engineers, and delivery professionals to improve database security posture. You will design and develop security features for our products, systems, applications and/or solutions that solve sophisticated business problems, deploy innovative products, services, and experiences to delight our customers! In addition to advanced technical expertise and experience, you will bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong business insight, an inclusive leadership attitude and a continuous learning focus to all that you do.

Requirements

• Bachelor of Computer Science or Engineering or experience in related fields
• Ability to mentor others with minimal guidance and effectively leverage diverse ideas, experiences, thoughts and perspectives to the benefit of the organization
• Experience with agile development methodologies and Test-Driven Development (TDD)
• Knowledge of business concepts, tools and processes that are needed for making sound decisions in the context of the company's business
• Ability to learn new skills and knowledge on an on-going basis through self-initiative and tackling challenges
• Excellent problem solving, communication and collaboration skills
• Advanced experience and/or expertise with several of the following: Applied Security Experience
• Experience working with distributed systems across different operating systems and databases, both cloud and on-premises
• Applied experience with IBM Guardium / Imperva DAM and Vulnerability Assessment (VA) (certification is a plus)
• Knowledge of various DBMS (MSSQL, Oracle, DB2, PostgreSQL, Redshift, Couchbase, MongoDB, Hadoop) and Cloud DB (Aurora PostgreSQL, Amazon DynamoDB, Document DB, Redshift, RDS, Azure SQL, Cosmos DB, snowflake Capella etc.)
• Familiarity with hybrid cloud environments
• Understanding of hardware, virtual machines, networking, and protocols
• Basic risk management, auditing, and compliance knowledge
• Programming Languages: Python, Shell/Power scripting, SQL, Modern languages
• Frameworks: Ansible, CloudFormation, Terraform
• Infrastructure fundamentals Linux / UNIX Operating Systems : File Permissions, Network Configuration, Services, Process Manipulation; supporting vendor security solutions
• Database Fundamentals: Schemas, Tables, Permissions, SQL, Security
• Networking, TCP/IP and other common Communication Protocols: OSI Model, 3 Way Handshake, Stateful vs Stateless, Proxy Firewall
• Containers: Docker, Kubernetes
• Application Programming Interfaces (API): Consumption & Development
• Test/Quality capabilities & methodologies (functional & nonfunctional) and associated tooling including quality automation
• Infrastructure & Cloud Security best practices including DevSecOps
• Dev Ops Tools & Practices: awareness, understanding of DevOps automation tools, practices & capabilities (continuous integration & continuous delivery)
• Software Development Life Cycle (SDLC): Development and Design Fundamentals including SDLC and coding standards
• Cloud Computing: Understanding and knowledge (of 1 or more): AWS, Azure or GCP Cloud service consumption
• Disaster Recovery and High Availability

Nice To Haves

• IBM Guardium / Imperva DAM and Vulnerability Assessment (VA)

Responsibilities

• Create, code and support solutions to automate the creation, management, or destruction of infrastructure and related security components
• Provide easily consumable services to software development teams to assist in the consumption of database infrastructure monitoring solutions and partner to implement them
• Ensures product security is maintained throughout the product lifecycle, integrating new security features and updates into existing products.
• Collaborate with product owners in understanding needs and defining feature stories, tech leads in defining technical design and other team members to understand the system end-to-end and deliver robust solutions that bring about business impact and support the goals
• Automate unit and integration test cases, solve problems, and add new value with automation
• Develop corporate platform standards based on cost, capability, and capacity requirements to drive business value; document solutions to support the adoption of developed solutions
• Bring a strong understanding of relevant and emerging technologies, provide input and coach team members and embed learning and innovation in the day-to-day
• Work on complex problems in which analysis of situations or data requires an evaluation of intangible variables.
• Apply infrastructure fundamentals to AWS/Azure/Windows/Linux/Unix databases, network and TCP/IP, and common communication protocols
• Use programming languages including but not limited to Python, Shell/Power scripting, SQL, Modern languages and Ansible, CloudFormation and Terraform frameworks
• Support for Database activity monitoring, SOX compliance, threat analytics, SNOW and Splunk integration
• Managing Database configuration compliance, vulnerability management, CIS benchmarking, SNOW integration
• Support for Privileged access and entitlement reporting
• Infrastructure health checks, patching, maintenance, disaster recovery, and business continuity

Benefits

• Market competitive base salaries, with a yearly bonus potential at every level.
• Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave.
• 401(k) plan with company match (up to 4%).
• Company-funded pension plan.
• Wellness Programs including up to $1,600 a year for reimbursement of items purchased to support personal wellbeing needs.
• Work/Life Resources to help support topics such as parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.
• Education Benefit to help finance traditional college enrollment toward obtaining an approved degree and many accredited certificate programs.
• Employee Stock Purchase Plan: Shares can be purchased at 85% of the lower of two prices (Beginning or End of the purchase period).
• Eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior