Senior Product Security Engineer

Bayer•Seattle, WA

4d•$168,000 - $185,000•Hybrid

About The Position

At Bayer we’re visionaries, driven to solve the world’s toughest challenges and striving for a world where 'Health for all Hunger for none’ is no longer a dream, but a real possibility. We’re doing it with energy, curiosity and sheer dedication, always learning from unique perspectives of those around us, expanding our thinking, growing our capabilities and redefining ‘impossible’. There are so many reasons to join us. If you’re hungry to build a varied and meaningful career in a community of brilliant and diverse minds to make a real difference, there’s only one choice. Senior Product Security Engineer Senior Product Security Engineer for Seattle, WA to develop, implement & recommend security solutions; drive integration of security controls into applications & cloud services platform using product security assessments & automation techniques; optimize deployment & scalability of security tools; collaborate with cross-functional IT stakeholders to troubleshoot security issues. Requires Master’s in C.S., IT, Cybersecurity or other closely-related technical field & 3 yrs experience in an IT Security-related position(s): implementing application security by reviewing code, IAM policies, Threat Models, & ensuring adherence to security coding standards; optimizing security tool deployments in Git-based CI/CD & introducing scalable processes across Product Security capabilities; partnering with product teams to define security controls for information security compliance programs including GDPR, NIST, & CIS; providing software, network security & vulnerability management; maintaining current insights into standard security regulations, policies, & procedures for information systems; maintaining written documentation for product project & program strategies, and security SOP’s & standards; using Agile, Scrum & Kanban methodologies to reduce attack surface & improve security engagement; driving logging & alerting requirements across an organization; identifying security violations, deficiencies, & inefficiencies through audit activity & regular monitoring; using Cloudguard, Archer, & Gitlab for cloud-based services and/or multi-cloud infrastructure; troubleshooting, responding to, & resolving Product Security Events & Incidents; deploying Lambas to process security logging, alerts and notifications; using Python, Java & JavaScript to assist Product Engineering teams in reading & understanding code & building or modifying security tools. Will also accept Bachelor’s in said fields & 5 yrs progressive, post-Bachelor’s stated experience. Telecommuting permitted from home office location within reasonable commuting distance of Seattle, WA up to 2 days per week. Salary Range: Employees can expect to be paid a salary between $168,000.00 to $185,000.00. Additional compensation may include a bonus or commission (if relevant). Additional benefits include health care, vision, dental, retirement, PTO, sick leave, etc. The offered salary may vary within this range based on an applicant’s location, market data/ranges, an applicant’s skills and prior relevant experience, certain degrees and certifications, and other relevant factors. Mail resume to Jill Martin, Bayer CropScience LLC, 800 N. Lindbergh Blvd., E2NE, St. Louis, MO 63167 or email resume to [email protected]. Include reference code below with resume.

Requirements

Master’s in C.S., IT, Cybersecurity or other closely-related technical field & 3 yrs experience in an IT Security-related position(s)
implementing application security by reviewing code, IAM policies, Threat Models, & ensuring adherence to security coding standards
optimizing security tool deployments in Git-based CI/CD & introducing scalable processes across Product Security capabilities
partnering with product teams to define security controls for information security compliance programs including GDPR, NIST, & CIS
providing software, network security & vulnerability management
maintaining current insights into standard security regulations, policies, & procedures for information systems
maintaining written documentation for product project & program strategies, and security SOP’s & standards
using Agile, Scrum & Kanban methodologies to reduce attack surface & improve security engagement
driving logging & alerting requirements across an organization
identifying security violations, deficiencies, & inefficiencies through audit activity & regular monitoring
using Cloudguard, Archer, & Gitlab for cloud-based services and/or multi-cloud infrastructure
troubleshooting, responding to, & resolving Product Security Events & Incidents
deploying Lambas to process security logging, alerts and notifications
using Python, Java & JavaScript to assist Product Engineering teams in reading & understanding code & building or modifying security tools
Bachelor’s in said fields & 5 yrs progressive, post-Bachelor’s stated experience

Responsibilities

develop, implement & recommend security solutions
drive integration of security controls into applications & cloud services platform using product security assessments & automation techniques
optimize deployment & scalability of security tools
collaborate with cross-functional IT stakeholders to troubleshoot security issues
implement application security by reviewing code, IAM policies, Threat Models, & ensuring adherence to security coding standards
optimizing security tool deployments in Git-based CI/CD & introducing scalable processes across Product Security capabilities
partnering with product teams to define security controls for information security compliance programs including GDPR, NIST, & CIS
providing software, network security & vulnerability management
maintaining current insights into standard security regulations, policies, & procedures for information systems
maintaining written documentation for product project & program strategies, and security SOP’s & standards
using Agile, Scrum & Kanban methodologies to reduce attack surface & improve security engagement
driving logging & alerting requirements across an organization
identifying security violations, deficiencies, & inefficiencies through audit activity & regular monitoring
using Cloudguard, Archer, & Gitlab for cloud-based services and/or multi-cloud infrastructure
troubleshooting, responding to, & resolving Product Security Events & Incidents
deploying Lambas to process security logging, alerts and notifications
using Python, Java & JavaScript to assist Product Engineering teams in reading & understanding code & building or modifying security tools