Senior Security Engineer - Application Security

About the position

Gartner seeks a Security Engineer to join our top-tier Enterprise Security Team. You will be responsible for implementing and maintaining a robust security posture across Gartner's diverse technology landscape. Your expertise in security best practices, network security, data protection, and endpoint security will be essential in protecting Gartner's assets and ensuring the confidentiality, integrity, and availability of our information.

Responsibilities

• Optimize security solutions that align with industry best practices and Gartner's specific needs.
• Design and implement security controls for cloud environments.
• Stay abreast of the latest security technologies and trends to identify opportunities for enhancing Gartner's security controls.
• Collaborate with cross-functional teams to assess security risks, identify vulnerabilities, and develop remediation plans.
• Understand web applications at a sufficient level to work with developers to implement protective controls that may need to be customized for specific applications.
• Develop and maintain comprehensive documentation of security processes, procedures, and configurations.

Requirements

• Proven experience as a security engineer working on IT security projects in a dynamic environment.
• Strong understanding of security principles, common attack vectors, and mitigation strategies.
• Experience network security, data protection, and application security concepts.
• Experience with implementing security solutions across Amazon Web Services (AWS), Microsoft Azure or Google Cloud Platform (GCP).
• A proactive and adaptable approach to problem-solving, with a focus on continuous improvement.
• Understanding of OWASP, CVSS, the MITRE ATT&CK framework and the software development lifecycle.

Nice-to-haves

• 3-5 years' experience in application security, or information security administration.
• Experience with cloud infrastructure (IaaS) in Azure or AWS is highly desirable.
• Cloud Industry certifications (AZ500, AWS CSS, CCSK, etc.) are a plus.
• Strong scripting/development skills in languages like Python, PowerShell, etc.

Benefits

• Competitive Compensation Package
• Ongoing mentorship and apprenticeship; Leadership courses, development programs, technical courses, certification opportunities and more!
• 20+ PTO days plus holidays and floating holidays in your first year
• Extensive Medical, Dental and Vision plans
• Flexible work environment
• Parental leave
• Gartner Gives Charity Match
• Employee Assistance Program (EAP)
• Employee Stock Purchase Plan
• Health and wellness related allowance programs
• 401K with corporate match, immediate vesting
• Collaborative, team-oriented culture that embraces diversity
• Professional development and unlimited growth opportunities