Job Description

OPENTEXT
OpenText is a global leader in information management, where innovation, creativity, and collaboration are the key components of our corporate culture. As a member of our team, you will have the opportunity to partner with the most highly regarded companies in the world, tackle complex issues, and contribute to projects that shape the future of digital transformation.

The Opportunity

The Leader Security Engineer is a member of the Security Operations Centre team reporting to the Sr. Manager, Cloud Security. This hands-on role will focus on designing security features and hardening processes for cloud environments and container-based applications. The successful candidate will have responsibility to ensure industry best practices and methodologies are applied to the design, deployment, and operation of our public Cloud environments. This position identifies integration and cybersecurity issues, opportunities for improvements, and best practices to safeguard data, CI/CD pipelines and cloud workload infrastructure from internal and external threats. This role requires a deep technical knowledge of security technologies and must have a solid understanding of securing cloud infrastructure and containerized environments.

You Are Great At

• Leading the security design of OpenText Public cloud infrastructure, including AWS, Azure and GCP.
• Planning, testing, and implementing security solutions for the monitoring and protection of company assets in the cloud.
• Deployment, management, and optimization of cloud and container security tools such as Prisma Cloud (RedLock/Twistlock), Lacework, Sysdig, etc.
• Detailed understanding of securing the end-to-end image/container lifecycle from image build to production deployment.
• Build methods to advance automation and security for cloud and container-based applications to realize DevSecOps CI pipelines.
• Understanding of Kubernetes, Docker security.
• Analyzing requirements for security tools and technology (SIEM, Endpoint Protection, Vulnerability Management).
• Developing standards, policies, and procedures as well as best practices documentation.
• Providing direction and guidance on OpenText’s security requirements and standards for use in cloud environments.
• Automating security controls to streamline operational services and support.
• Identifying processes/procedures for how to handle cloud workload security events, including forensic isolation and mitigation with Digital Forensics and Incident Response (DFIR/IR) teams.
• Identifying new security threats by conducting continual monitoring, security testing, vulnerability assessments and log analysis.
• Performing other duties and responsibilities necessary.

What It Takes

• BS in Computer Science, Cyber Security, Information Assurance, or Information Security preferred.
• Minimum of 5 years of IT Security and/or security engineering experience, with a focus on Cloud Security and container security technologies.
• Proficiency in a scripting language such as Python, PowerShell, or Bash.
• Experience with selecting, designing, and implementing security tools and capabilities for large, complex commercial organizations with focus on cloud and container security.
• Experience with containers and knowledge of Kubernetes and Docker.
• Experience with Linux and Windows environments.
• Experience with security services for Anti-Virus, Threat and Vulnerability Management, Unified Threat Management, SIEM, Cloud workload protection, other tools and services.
• Understanding of compliance frameworks, like PCI, ISO 27001, NIST, FedRAMP etc.
• Able to demonstrate clear understanding of current threats to Cloud infrastructure and/or IT infrastructures at technical and managerial levels.
• Strong written and presentation skills with the ability to communicate effectively with diverse technical and non-technical groups, spanning all organizational levels.
• Must be able to work in a fast paced and changing environment while handling multiple tasks, priorities, and directives. Capable of working under pressure.
• CISSP, CISA, CISM, or other industry certifications preferred.