[Hiring] Security Engineer I @Trueml

Role Description

This role involves working across several internal departments and with security partners to systematically identify and address information security issues.

• Hardening of cloud-based infrastructure
• Create/maintain Vulnerability Management program (detection, analysis, reporting, remediation assistance)
• Building and updating network and system diagrams
• Secure programming in a CI/CD environment
• Implementation of security controls (Firewalls, AWS Security Groups, Two Factor Authentication, anti-virus, anti-phishing, DDOS mitigation)
• Conduct regular security-related assessments (vulnerability scans, penetration tests) to maintain company's compliance status
• Designing and tracking security metrics
• Assist in gathering evidence for security audits and compliance reviews (e.g., PCI, ISO 27001)
• Utilizing Gen Ai to perform analysis on malware, threat intelligence, and security logs
• Assist in the day-to-day operation and monitoring of security tools, including Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and firewalls
• Assist with initial incident response activities, including gathering evidence, documenting steps, and helping to contain and eradicate threats
• Help maintain and update security documentation, including procedures, runbooks, and configuration guides

Qualifications

• B.S. in Computer Science or equivalent experience
• 3+ years of experience in information security
• 2+ years of experience working with Amazon Web Services
• Advanced technical knowledge of infrastructure, applications, and cloud security
• Experience running OWASP Top Ten assessments and analysis
• Excellent written and verbal communication skills
• Advanced knowledge of information security standards, rules, and regulations related to information security and data confidentiality
• Excellent problem-solving skills

Requirements

• Passionate about knowing the latest on trends and issues in the security industry, including new technologies

What Will Make You Stand Out (Nice to Have's)

• Scripting knowledge in Python or another language
• Knowledge of security frameworks and certifications (AWS Security, Security +, SSCP)
• Relevant Information Security certifications

Benefits

• Unlimited PTO
• Medical benefit contributions in congruence with local laws and type of employment agreement

Company Description

TrueAccord, a wholly owned subsidiary of TrueML, is a category-defining company that combines machine learning with a human-based approach to transform debt resolution and help people achieve financial health.