Senior Information Security Engineer

YOUR CHALLENGE:

• Perform security assessments to identify gaps in current security controls, processes, and systems.
• Research, evaluate, and implement new security tools and technologies per Catena Media’s security strategy.
• Collaborate with various teams on security projects from inception to implementation, ensuring a smooth hand-off to the operations team for ongoing BAU support.
• Act as a key resource during incidents, providing technical expertise and helping to contain, analyze, and remediate security incidents.
• Develop documentation for implemented tools, systems, and processes to facilitate knowledge transfer to the operations team.
• Liaise with vendors and third-party service providers to assess new security products and solutions.
• Conduct security audits and configuration reviews to ensure adherence to best practices and security policies.
• SME & Advisory Responsibilities
• Serve as a subject matter expert on information security engineering topics, providing guidance on best practices, industry trends, and emerging threats.
• Assist in designing and developing the security strategy, ensuring alignment with the broader organizational goals.
• Collaborate with IT and business teams to align security initiatives with Catena Media’s technology roadmap.
• Work closely with management to refine the security engineering roadmap, ensuring the team has the tools, resources, and knowledge necessary to execute effectively.
• Provide training and mentorship for the security engineering team on tools, processes, and incident response techniques.

TO DO IT, YOU WILL NEED:

• 
  
Technical Skills and Experience
• Bachelor's Degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• Certifications:
• CISSP, CEH, OSCP, or equivalent certifications are preferred.
• Technical Proficiency:
• Proficient in security technologies (e.g., firewalls, SIEM, XDR, etc.).
• Hands-on experience with vulnerability management tools (e.g., Rapid7, Nessus, Qualys) and basic penetration testing.
• Familiarity with cloud security platforms (AWS, Azure, GCP).
• Experience in scripting languages (e.g., Python, PowerShell) for automation.
• Familiarity with incident response processes and tools.
Soft Skills
• Analytical mindset with a focus on identifying and solving complex security challenges.
• Excellent communication skills, capable of conveying technical information to diverse audiences.
• Proven experience in cross-functional collaboration and project management.
• Ability to work under pressure, particularly in incident response situations.