Senior Security Engineer

SPS Commerce•Minneapolis, MN

8d•Hybrid

About The Position

SPS Commerce is a leading provider of cloud-based supply chain management solutions, serving a global network of retail trading partners. We foster a collaborative and inclusive work environment where innovation and continuous improvement are highly valued. Join SPS Commerce and be part of a dynamic team that's transforming the global retail supply chain! Position Summary: SPS Commerce is hiring a Senior Security Engineer to join our Cyber Defense team and ensure the program is successful in developing and delivering secure services, driving secure outcomes for our business and customers. You will work closely with technology owners and cross-functional teams to deliver scaled defensive services through effective use of security tools and technologies to detect, prevent and respond to security threats. The ideal candidate will possess experience in information security operations, a strong understanding of various security tools and controls, and ability to develop and deliver scalable services. Key Responsibilities: In this role, you will have primary responsibility to develop and maintain Cyber Defense solutions and services. You will contribute to solution design, planning, and roadmaps to deliver scaled quality Cyber Defense outcomes across technology and product delivery. Streamline security processes and enhance efficiency, including creating automation and Agentic solutions to orchestrate security-related processes. Collaborate with internal teams to identify security requirements and implement solutions that meet business needs while adhering to industry best practices. Help implement the security program strategic plan that improves program maturity and compliance. Participate in development and evaluation of security toolsets to develop and enhance SecOps capability. Develop, manage, and consult on the technical architecture for enterprise security controls. Partner with business and technology operations groups to maintain the security threat monitoring infrastructure and tools (perimeter controls, intrusion detection / protection devices, vulnerability scanning tools, security event correlation tools, content surveillance and filtering devices). Design, deploy, and maintain CrowdStrike platform to enhance the organization's security posture. Configure and manage SIEM (Security Information and Event Management) systems to monitor, detect, and respond to security incidents effectively. Conduct regular assessments of security tools and technologies to ensure they remain effectively aligned with evolving security threats and emerging technologies. Provide technical expertise and support to troubleshoot security tool-related issues. Stay updated on emerging security trends, vulnerabilities, and threat actors to proactively enhance the organization's security defenses.

Requirements

5 years of experience with bachelor’s degree in related business or technical areas; or 8 years of experience without a degree. Equivalent work experiences include security engineering, architecture or development
Experience designing and implementing security standards, specifications, and procedures
Experience in providing technical security guidance to technical and non-technical audiences.
Experience with compliance standards from SOC 2, SOX, ISO-27001, HIPAA, and PCI-DSS
Strong proficiency in security tools and platforms such as CrowdStrike.
Strong automation background, preferably experience with Tines.
Experience with SIEM platforms, including configuration, management, and customization.
Excellent problem-solving and data skills, ability to troubleshoot complex technical issues.
Cloud Native Security tooling within AWS, Azure and GCP
Adaptability: Navigates ambiguity, reprioritizes effectively, and maintains momentum in dynamic environments

Nice To Haves

Proficiency in scripting and automation, with a focus on Python.
Proficiency with Infrastructure as Code.
Proficiency with Claude, Desktop, Code, configurations or other AI.
Strong communication skills and the ability to collaborate effectively with cross-functional teams.
System configuration and architecture experience
Strong knowledge of industry accepted information security best practices, standards, and policies such as NIST CSF, OWASP, CIS, MITRE ATT@CK, etc.
Proven ability to manage information security service and operation through effective management of resources.
Demonstrated experience and understanding of business security and compliance requirements and ability to translate into well-engineered & integrated business solutions.
Demonstrated ability to take initiative and accountability for achieving results.
Driven to understand & appropriately respond to customers' business needs.
One or more industry certification - CISSP, CISM, CISA, CCFE, GIAC, CCIE, CCSP, ABCP, MBCP, ISA, PCIP, CEH
Actively participates and contributes to the security community

Responsibilities

Develop and maintain Cyber Defense solutions and services.
Contribute to solution design, planning, and roadmaps to deliver scaled quality Cyber Defense outcomes across technology and product delivery.
Streamline security processes and enhance efficiency, including creating automation and Agentic solutions to orchestrate security-related processes.
Collaborate with internal teams to identify security requirements and implement solutions that meet business needs while adhering to industry best practices.
Help implement the security program strategic plan that improves program maturity and compliance.
Participate in development and evaluation of security toolsets to develop and enhance SecOps capability.
Develop, manage, and consult on the technical architecture for enterprise security controls.
Partner with business and technology operations groups to maintain the security threat monitoring infrastructure and tools (perimeter controls, intrusion detection / protection devices, vulnerability scanning tools, security event correlation tools, content surveillance and filtering devices).
Design, deploy, and maintain CrowdStrike platform to enhance the organization's security posture.
Configure and manage SIEM (Security Information and Event Management) systems to monitor, detect, and respond to security incidents effectively.
Conduct regular assessments of security tools and technologies to ensure they remain effectively aligned with evolving security threats and emerging technologies.
Provide technical expertise and support to troubleshoot security tool-related issues.
Stay updated on emerging security trends, vulnerabilities, and threat actors to proactively enhance the organization's security defenses.