ESSENTIAL JOB FUNCTIONS Support security team projects such as threat modeling, vulnerability scanning and audits Conduct design reviews, testing of new infrastructure, and uplift the security posture for existing environments Build capabilities for automated evidence gathering through integration with our GRC platform Execute risk and threat analyst activities, demonstrating findings from external and internal cyber trends and incidents Propose and implement creative solutions to protect data across multiple platforms including endpoint, email, network, databases, and cloud applications Collaborate with software engineers, DevOps and infrastructure teams, product owners, and across security teams to understand how data is used, what protections are needed, and implement solutions Support incident and vulnerability response in collaboration with other products and security team Drive security engineering projects to eliminate attack vectors, harden the platform, and enhance monitoring and intrusion detection systems Lead discussions, assessments, tracking, and overall reporting of technology security risks Manage the effectiveness of tooling, rationalizing tools as needed, and identifying tool requirements, as necessary Coordinate with team members to maintain software and operate solutions Engage with teams to identify shared problems and develop automation Define metrics and key performance indicators to determine the effectiveness of the Security automation program Assess APIs and application endpoints for security deficiencies Lead cross-collaboration with other engineering and products teams and influence technical direction as well as provide guidance for complex infrastructure security engineering initiatives Mentor team members while providing vision and setting technical direction for the team as a technical lead Demonstrate technical leadership to manage and provide multiple technical solutions, perform code reviews, establish, and enforce coding guidelines and best practices Serve as an internal security consultant to teams looking to make IT investments; ensure systems are designed in accordance with, and are aligned to Crane's security policies and standards Influence the continuous improvement of the security program Provide ongoing assessments of the evolution of incident response tools and capabilities Perform ongoing monitoring of production security tools Provide assistance to more senior level staff as necessary Assist in the documentation of the security program IAM - Solution research, assessment, deployment, and on-going support IoT - Solution research, assessment, deployment, and on-going support Physical Access Security - Solution research, assessment, deployment, and on-going support Endpoint - Solution research, assessment, deployment, and on-going support Vulnerability management - Review and triage of vulnerabilities discovered via scanning tools Perform periodic penetration testing of networks, web-apps, wireless environments Perform advanced threat hunting on an on-going basis DLP with Data Classification - Solution research, assessment, deployment, and on-going support