Senior Engineer, Information Security

Bill & Melinda Gates Foundation•Seattle, WA

66d•Onsite

About The Position

Information Security is seeking an experienced and highly skilled individual for our Senior Engineer role. In this role you will work across teams to combine security and business requirements to develop, prototype, document, and communicate technical security controls to ensure security outcomes and manage risk at scale for our foundation and affiliated entities. Additionally, you will design and implement operational security practices performed by implementation teams and service providers and serve as a partner and decision maker related to security operations, including performing incident response. This role is critical in performing and contributing to the continuous improvement of the foundation’s global Information Security program. This is an individual contributor role reporting to the Deputy Director, Information Security.

Requirements

At least 5 years of experience in the Information Security field
2+ years of experience leading Information Security incident investigation and response
3+ years of experience with security preventative and detective controls such as endpoint protection, firewall policies, vulnerability management, SIEM, Microsoft Defender suite
Excellent collaboration, interpersonal, communication and facilitation skills with ability to present and influence audiences of varying skill levels
Experience in Security and regulatory compliance standards and frameworks such as: HIPAA, NIST CSF, ISO27001, and GDPR
Experience with controls configuration within common cloud environments (Azure, AWS)
Experience with scripting and automation tools knowledge: Azure Sentinel and KQL, PowerShell, Python, Terraform, Ansible or related
Experience with application containerization and orchestration: Docker and Kubernetes or related
Experience with source code management (Git, GitHub, GitLab) and CI/CD (GitLab CI, Jenkins, Drone, Azure DevOps)
Experience with Microsoft Windows (server/desktop) and Linux (CentOS/Ubuntu/RedHat)
Experience with identity and access management industry standard methodologies and related solutions (i.e., Active Directory, Azure AD, LDAP, SSO, MFA and related technologies)
Experience with networking protocol and tools, which may include TCP/IP, DNS, DHCP, SSL/TLS, VPN, VLAN, SSH, BGP, OSPF
Experience with server virtualization technologies: VMware, Hyper-V, Nutanix, KVM or other
Strong understanding of authentication and authorization technologies and protocols including SAML, OAuth, Kerberos
B.S. in Engineering, Math, Computer Science, or related field or equivalent working experience
Must be able to legally work in the country where this position is located without visa sponsorship.

Nice To Haves

High performance compute cloud architecture experience a plus

Responsibilities

Participate in the Information Security design process focusing on technical controls, including:
In partnership with technology delivery teams, further refine, prototype, and continuously improve technical security controls as implemented across our technology environment
Partner engagement to account for key business objectives and user personas
Risk management and tracking through the implementation and operation of the design outputs
Further refine, prototype, and test the design and continuous improvement of the Information Security portfolio including technology, services, and processes to achieve our core risk management objectives
Perform Information Security incident investigation and response
Communicate our design philosophies, reference architectures, and use cases to ensure our technology partners and service providers have the knowledge they need to innovate and operate technical solutions safely
Partner with IT teams during solution design and operation to develop implementation steps for security configuration