ComResource is hiring a Senior Security Engineer. The ideal candidate will be local to Columbus, OH and able to work a hybrid schedule.
The Sr Security Engineer supports the Cybersecurity mission of protecting and securing customer, associate, and shareholder’s most valuable information. The role is for a seasoned Identity and Access Management Engineer. Responsible for process and tools that support the areas of Identity Governance, Authentication and Authorization, and Privileged Access Management. Additionally provides support for any audit activities related to the IAM sub-domains.
RESPONSIBILITIES :
- Active Directory account provisioning
- Third party and privileged account management
- Owns new business provisioning until operational
- Owns certification and attestation of user access
- Support Authn / Authz, with a primary focus on SSO / MFA, risk based authn
- Complex application account provisioning (SAP, AS400, PKMS, Snowflake, etc.)
- Report out metrics : regulatory compliance reporting, producing access reviews
- Partner with security and intelligence teams on access related alerting
- Identify and define platform security requirements
- Prepare and document standard operating procedures and protocols
- Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks
- Owns and maintains multiple tools, controls or programs
- Support incident response process and war room activities on an as needed basis
- Acts as Information Security liaison with cross-functional workgroups and interacts with cross-functional Sr Leadership
- Partners with administrative security team in identifying risks and updating risk registry
- Cross-functional engagement (working with stores teams, business partners and other security teams)
POSITION QUALIFICATIONS :
6 – 8 years related experience.Bachelor’s Degree in Information Technology / Information Security or equivalent experience in technologyExperience with SailPoint ISE, CyberArk, PingIdentity, Directory Services, EntraADUnderstanding of networking applications and multiple platformsDemonstrated knowledge of security controls in relation to authentication, authorization, privilege access management, identity governanceCustomer Service experienceStrong written and verbal communication skillsExperience prioritizing work and / or managing a queueStrong multitaskingAbility to influenceAbility to communicate technical issues to nontechnical audiencesAbility to communicate to Sr. leadership and cross functional partnersUnderstanding of security controls and how they are used to detect and respondAbility to assess / evaluate / prioritize riskAbility to lead small (sometimes cross functional) teams / projects / programs