Security Platforms Engineer

Job description

The role is within the Information Security Risk Management (ISRM) Cyber Fusion Engineering team responsible for the support of Thomson Reuters Cyber Defense Engineering Tools. The successful candidate will have the opportunity to learn - and provide skilled technical support - for our current infrastructure security toolset as well as our future security services within the technical operations environment.

About the role:

• Support the development and maintenance of security tools and infrastructure such as Confluence, MISP Threat Intelligence Platform, and ServiceNow Security Incident Response.
• Help build and maintain cloud infrastructure in support of our technologies
• Collaborate with Cyber Defense teams such as the SOC, Threat Detection, Threat Intel, and Incident Response teams to understand feature and support needs.
• Act as an interface with other IT disciplines inside the larger organization to develop deployment pipelines for AWS infrastructure to meet Enterprise standards.

About You:

• Bachelors Degree with 3+ years IT or Information Security experience
• Scripting experience with Python and bash
• Foundational knowledge of AWS
• Application/Infrastructure administration experience in an Enterprise environment.
• Excellent customer service and communication (oral / written) skills required.
• Strong critical thinking, analytical, and troubleshooting skills.
• Must be able to accept delegated work on assigned projects and initiatives and complete them successfully with minimum supervision.

Preferred Qualifications:

• Knowledge of/and experience with a Linux OS distribution.
• Hands on experience deploying and managing infrastructure in AWS
• Knowledge of/or experience with Infrastructure as Code technologies (e.g. Terraform, CloudFormation) and/or CI/CD pipeline technologies (e.g. AWS CodeBuild, Code Pipeline, etc)
• Understanding of the principles of IaaS, PaaS, SaaS cloud environments
• Knowledge of/and experience in Cyber Security or Security+ certification
• Knowledge of/or experience with security orchestration, automation, and response (SOAR) tools.
• Understanding of network transport protocols and services (TCP/IP, syslog, DNS, ODBC, SFTP, SSH, PKI, etc.)
• Experience working in a large enterprise environment