Senior Software Engineer, Information Security

Role Overview

• Formulates technical problems using knowledge of analytics, big data, and automation techniques while understanding business requirements and established use cases.
• Translates and co-owns business problems within a specific discipline into data-related or mathematical solutions.
• Identifies and applies appropriate methods and tools to solve problems and demonstrates how these approaches address business challenges through relevant examples.
• Manages functional partnerships by identifying stakeholders, analyzing their technical needs, and engaging them through effective and culturally aware communication.
• Shares functional insights regularly with internal and external partners to build and maintain credibility.
• Explores existing products or solutions to address identified business or technical needs.
• Assesses gaps between current offerings and customer expectations, particularly in agile environments.
• Classifies requirements into applicable types, anticipates risks during the requirements phase, informs stakeholders, and recommends corrective actions.
• Contributes to the creation of user stories for components or applications based on evolving requirements.
• Monitors program progress by tracking metrics and ensuring adherence to approved milestones and timelines.
• Writes and configures efficient, scalable, and secure code that meets business and technical requirements.
• Selects and applies suitable programming languages, frameworks, and development tools.
• Creates scripts to automate repetitive tasks within CI/CD pipelines and testing workflows, implements telemetry features, and follows all required security policies during code development.
• Prepares and executes test cases aligned with customer requirements and testing objectives.
• Uses appropriate testing strategies and tools to detect and document defects in the code.
• Tracks and manages defects throughout their lifecycle, performs regression testing, and analyzes root causes to prevent repeated issues.
• Troubleshoots and resolves performance or availability issues across applications and components.
• Conducts ongoing maintenance procedures for applications, analyzes logs and performance data, and monitors system metrics to ensure optimal functionality.
• Performs debugging, re-engineering, and updates as needed.
• Evaluates change requests for feasibility and implements approved updates while ensuring system integration, performance, security, and accessibility remain intact.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or related field
• 3 years of experience in software engineering or related experience; OR 5 years of experience in software engineering or related experience
• Experience with conducting risk assessments for vendors and internal markets
• Applying NIST Cyber Security Framework, NIST SP 800-53 security control requirements in risk assessments
• Conducting ISO 27001 Certificate and Statement of Applicability reviews
• Conducting SOC 2 Type 2 document reviews
• Assessing Data Loss Prevention (DLP) controls for vendors during risk assessments
• Assessing vendor security posture including privacy controls such as General Data Protection Regulations (GDPR) compliance
• Defining Risk Assessment questionnaire based on SIG Lite
• Utilizing Microsoft Excel for reporting and Microsoft Visio for creating internal process flow diagrams
• Utilizing SharePoint and OneDrive for assessment reports and artifact repository
• Coding in an object-oriented programming language (Python) for creating automation scripts
• Creating Tableau dashboards to present metrics

Tech Stack

• Cyber Security
• Python
• Tableau

Benefits

• Health insurance
• 401(k) plan
• Paid time off
• Flexible work arrangements
• Professional development