Security Engineer

Orion Innovation is a premier, award-winning, global business and technology services firm. Orion delivers game-changing business transformation and product development rooted in digital strategy, experience design, and engineering, with a unique combination of agility, scale, and maturity. We work with a wide range of clients across many industries including financial services, professional services, telecommunications and media, consumer products, automotive, industrial automation, professional sports and entertainment, life sciences, ecommerce, and education.

Our Partner

Our partner is a fast-growing software company that builds networks like clouds. It offers communications service providers and cloud providers a radical new way to build networks, detaching network growth from network cost and increasing network profitability.

Our partner's Network Cloud solution uniquely supports the complete virtualization of network and compute resources, enabling communication service providers and cloud providers to meet increasing service demands much more efficiently than with today's monolithic routers.

Their software runs over standard white-box hardware and can easily scale network capacity by adding additional white boxes into physical network clusters. This unique disaggregated network model enables the physical infrastructure to operate as a shared resource that supports multiple networks and services. This unique network design also allows faster service innovation at the network edge, supporting multiple service payloads, including latency-sensitive ones, over a single physical network edge.

Overall Objective of the Role

We are seeking a Security Engineer with a strong focus on software and R&D security. While they will be asked and required to work on operational security matters as needed, the focus of the role is code security. They will need to lead the selection, deployment and management of code scanning tools we run in the cloud, as well as be able to work collaboratively with R&D to identify and remediate security issues uncovered in the code base. They must be highly technical and able to speak in detail to code-related security issues with first-line SWEs.

Responsibilities

• Serve as the principal liaison between Information Security and the development (R&D organization).
• Work collaboratively with R&D to triage and remediate CVEs and other vulnerabilities identified in the code scanning and assessment process.
• Uplift the code and snippet scanning processes.
• Manage software penetration testing.
• Lead the shift-left and SSDLC methodologies for the company.
• Assist in operational security matters when needed.
• Identify, deploy, and manage SaaS-based tools used in the code/snippet assessment and scanning processes.
• Work collaboratively with customers to address software-related security concerns.

Requirements

• Demonstrates kindness and professionalism.
• Bachelor's Degree in a relevant technical field.
• Deep knowledge of Information Security best-practices and methodologies (5+ years).
• 3+ years of experience with CSPM, CPM tools and methodologies.
• Familiarity with CI/CD pipeline deployment/management & shift left methodology.
• 3+ years of familiarity with operational security best practices.
• 3+ years of experience deploying and managing network and code analysis tools - DAST, SAST, Penetration Testing and snipped scanning.
• Basic knowledge around C/C++ & TypeScript.
• 3+ years working with IaC (Pulumi/Terraform).
• Coding capabilities in Python/Groovy.
• 2+ years working with AWS & public cloud infrastructure.
• 3+ years working with Docker containers.
• 5+ years of experience working in Linux environments.

Reasons to Work with Us

• Competitive financial conditions.
• Opportunity to work on internationally recognized projects.
• Flexible schedule and a hybrid work model, prioritizing remote work as much as possible to support work-life balance.
• An exciting career path within a friendly, dynamic, and growing organization.
• Professional development opportunities in a multicultural environment.
• Private medical coverage with Medlife or Regina Maria.
• Meal vouchers.
• Gift vouchers for special occasions such as birthdays, weddings, or childbirth.
• Wellbeing programs, including sick days, 7Card subscriptions, and relaxation facilities in the office.
• Team-building events and other social experiences.
• Budget allocated for certifications relevant to your project.
• Workshops, internal training sessions, and knowledge-sharing opportunities.
• Access to LinkedIn Learning, upon request.
• Access to Udemy, if required for your project.
• Convenient city-center office location.
• Shared parking spaces.

As a global digital transformation company, Orion values creating a productive, diverse work environment. We are committed to maintaining a positive work environment where our people value traits that make each one of us different from one another. We all bring a diverse set of perspectives, work and life experiences, and our differences make us more valuable both internally and for our clients.

Orion is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, citizenship status, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Candidate Privacy Policy

Orion Systems Integrators, LLC and its subsidiaries and its affiliates (collectively, "Orion," "we" or "us") are committed to protecting your privacy. This Candidate Privacy Policy ) ("Notice") explains:

• What information we collect during our application and recruitment process and why we collect it;
• How we handle that information; and
• How to access and update that information.

Your use of Orion services is governed by any applicable terms in this notice and our general Privacy Policy.