Sr Cloud Security Engineer/Analyst - Exposure Management

Edward Jones • Tempe, AZ

111d

About The Position

Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career.

Requirements

• Bachelor's degree in Information Technology, Telecommunications, or Engineering is preferred or related work experience.
• 5+ years of experience in cybersecurity as a practitioner and at least 2+ years of exposure with one of the following: Amazon Web Services (AWS) or Microsoft Azure.
• Knowledgeable of security principles for Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).
• Knowledge and understanding of misconfiguration and vulnerabilities of cloud-native applications and infrastructure.
• Experience in security operations, especially in security configuration management of cloud-native applications and infrastructure.
• Experience in the deployment, configuration, and/or operation of cloud security tools is considered a plus.
• Ability to work as an individual and within a fast-paced, collaborative environment.
• Familiarity with DevSecOps methodology and Agile frameworks.
• Strong written and verbal communication skills since you will be required to frequently interact with business and technical stakeholders.
• Ability to apply critical thinking, analyze scenarios, consider other perspectives, factors, and dependencies to ensure an effective tactical and strategic direction to address complex problems.
• Working knowledge of various industry compliance standards, regulatory requirements and laws including but not limited to: Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR) and Gramm-Leach-Bliley Act (GLBA), ISO 27001/2, ITIL or NIST.

Responsibilities

• Partner with business, technology, and security teams to maintain and enhance the firm's cloud security capabilities for cloud-native applications and infrastructure.
• Partner with security teams to identify misconfigurations and vulnerabilities, assess security risk, recommend priority, and recommend mitigations to maintain the security posture of the firm.
• Assist security teams by providing data and analysis of the security posture of cloud-native applications and infrastructures.
• Participate in the reviews of vendor capability demonstrations, proof-of-concept testing, and vendor contract negotiation.
• Stay apprised of current and proposed changes impacting regulatory, privacy, and security for cloud-native applications and infrastructure.
• Apply learned knowledge across key lines of business, including products, practices, and procedures.
• Develop and improve key metrics for demonstrating the effectiveness of the program.
• Analyze misconfigurations and vulnerabilities to determine security risk and priority.

Benefits

• Medical and prescription drug coverage
• Dental and vision insurance
• Voluntary benefits (such as accident, hospital indemnity, and critical illness)
• Short- and long-term disability coverage
• Basic life and basic AD&D coverage provided at no cost to associates
• 401k retirement plan
• Tax-advantaged accounts: health savings account, and flexible spending account
• Ten paid holidays
• Fifteen days of vacation for new associates beginning on January 1 of each year
• Sick time, personal days, and a paid day for volunteerism
• Eligibility for bonuses and profit sharing
• Employee Assistance Program

What This Job Offers

• Industry: Securities, Commodity Contracts, and Other Financial Investments and Related Activities
• Education Level: Bachelor's degree