Senior Software Engineer, Security Assurance | Germany | Remote
Grafana Labs
FBS – Farmer Business Services is part of Farmers operations with the purpose of building a global approach to identifying, recruiting, hiring, and retaining top talent. By combining international reach with US expertise, we build diverse and high-performing teams that are equipped to thrive in today’s competitive marketplace.
We believe that the foundation of every successful business lies in having the right people with the right skills. That is where we come in—helping Farmers build a winning team that delivers consistent and sustainable results.
Since we don’t have a local legal entity, we’ve partnered with Capgemini, which acts as the Employer of Record. Capgemini is responsible for managing local payroll and benefits.
Summary:
Utilize a wide range of risk-based methodologies to independently perform intermediate to advanced technical analysis of a broad range of interdependent medium to high cybersecurity risks. Analyze and establish security requirements for all company systems/networks; advise how to protect a highly complex information system to ensure the confidentiality, integrity, and availability of systems and data. Independently perform security testing and security risk assessments of high complexity according to best practices to address business challenges while also improving business processes. Independently manage and serve as a SME for all company security and technology platforms; analyze severe security breaches and incidents; participate in architectural discussion for any company technology platform; and document corporate security policies
•Identify, assess, document, and articulate all types of data security and data privacy risks in addition to appropriate countermeasures and controls to address data security and data privacy concerns.
•Identify opportunities to proactively mitigate moderate to major risks, and manage threat or target analysis of cyber defense information and production of threat information within the enterprise.
•Conduct third party data security risk assessments, project security assessments, business risk assessments and security testing for most company systems and potential new systems.
•Perform technical and nontechnical risk, and vulnerability assessments of relevant technology focus areas including local and global computing environment, network, infrastructure and applications, etc.
•Perform risk analysis when any application or system undergo a major change.
•Capture security controls to integrate security within the process, to identify key security objectives, and to maximize software security while minimizing disruption to plans and schedules.
•Design processes to ensure legal and regulatory security compliance requirements are met.
•Lead process improvement in detecting and responding to cybersecurity incidents and events.
•Review, approve and ensure implementation of sophisticated security configurations. Interpret irregular and indeterminate patterns of noncompliance to determine their impact on levels of risk and overall effectiveness of the enterprise’s cybersecurity program.
•Oversee detective, protective or corrective measures when cybersecurity incidents are discovered.
•Participate in audits of cyber programs and projects.
•Track audit findings and recommendations to ensure appropriate mitigation actions are taken.
•Demonstrate ownership of assigned audit actions or regulator requests by diligently providing responses and evidence within established timeframes.
•Build and manage relationships with a wide network of local business and IT front-line and senior stakeholders.
•Lead cross-functional projects that incorporate local and global teams.
•Demonstrate the value of information technology (IT) security throughout all levels of the organization.
•Influence business and IT teams to create innovative and sophisticated solutions to complex problems.
•Create, review, and update security policies, procedures, standards and guidelines.
•Act as a SME for most company technology platforms and main contact point for IT groups seeking intermediate to advanced security input.
•Participate in architectural discussions for all company technology platforms
This position comes with a competitive compensation and benefits package.
Originally posted on Himalayas
Grafana Labs
Greenhouse
Stripe
Okta
Okta
Okta
Elastic
Block
Block
ITT Inc.
NVIDIA
Critical Start
Critical Start
Softtest pays pty ltd
NVIDIA
MicroSourcing
NVIDIA
EngiFlex
Look4IT
TheHiveCareers
NVIDIA
TheHiveCareers
ZEBRA PEOPLE RO
MhyMatch
Axiom Path
Capgemini Technology Services
NVIDIA
knowmad mood
SQA Solution
Wiz
FBS – Farmer Business Services is part of Farmers operations with the purpose of building a global approach to identifying, recruiting, hiring, and retaining top talent. By combining international reach with US expertise, we build diverse and high-performing teams that are equipped to thrive in today’s competitive marketplace.
We believe that the foundation of every successful business lies in having the right people with the right skills. That is where we come in—helping Farmers build a winning team that delivers consistent and sustainable results.
Since we don’t have a local legal entity, we’ve partnered with Capgemini, which acts as the Employer of Record. Capgemini is responsible for managing local payroll and benefits.
Summary:
Utilize a wide range of risk-based methodologies to independently perform intermediate to advanced technical analysis of a broad range of interdependent medium to high cybersecurity risks. Analyze and establish security requirements for all company systems/networks; advise how to protect a highly complex information system to ensure the confidentiality, integrity, and availability of systems and data. Independently perform security testing and security risk assessments of high complexity according to best practices to address business challenges while also improving business processes. Independently manage and serve as a SME for all company security and technology platforms; analyze severe security breaches and incidents; participate in architectural discussion for any company technology platform; and document corporate security policies
•Identify, assess, document, and articulate all types of data security and data privacy risks in addition to appropriate countermeasures and controls to address data security and data privacy concerns.
•Identify opportunities to proactively mitigate moderate to major risks, and manage threat or target analysis of cyber defense information and production of threat information within the enterprise.
•Conduct third party data security risk assessments, project security assessments, business risk assessments and security testing for most company systems and potential new systems.
•Perform technical and nontechnical risk, and vulnerability assessments of relevant technology focus areas including local and global computing environment, network, infrastructure and applications, etc.
•Perform risk analysis when any application or system undergo a major change.
•Capture security controls to integrate security within the process, to identify key security objectives, and to maximize software security while minimizing disruption to plans and schedules.
•Design processes to ensure legal and regulatory security compliance requirements are met.
•Lead process improvement in detecting and responding to cybersecurity incidents and events.
•Review, approve and ensure implementation of sophisticated security configurations. Interpret irregular and indeterminate patterns of noncompliance to determine their impact on levels of risk and overall effectiveness of the enterprise’s cybersecurity program.
•Oversee detective, protective or corrective measures when cybersecurity incidents are discovered.
•Participate in audits of cyber programs and projects.
•Track audit findings and recommendations to ensure appropriate mitigation actions are taken.
•Demonstrate ownership of assigned audit actions or regulator requests by diligently providing responses and evidence within established timeframes.
•Build and manage relationships with a wide network of local business and IT front-line and senior stakeholders.
•Lead cross-functional projects that incorporate local and global teams.
•Demonstrate the value of information technology (IT) security throughout all levels of the organization.
•Influence business and IT teams to create innovative and sophisticated solutions to complex problems.
•Create, review, and update security policies, procedures, standards and guidelines.
•Act as a SME for most company technology platforms and main contact point for IT groups seeking intermediate to advanced security input.
•Participate in architectural discussions for all company technology platforms
This position comes with a competitive compensation and benefits package.
Originally posted on Himalayas