Monday 28 July 2014

Enterprise Security Engineer | Twitter, Inc. | San Francisco, CA


Enterprise Security Engineer | Twitter, Inc. | San Francisco, CA


Enterprise Security Engineer

Infrastructure Operations | San Francisco, CA

Job Description

As an Information Security Engineer, you will share responsibility for managing business risk related to Information systems; safeguarding Twitter’s information and the data entrusted to us by our users.
The Information Security Team at Twitter partners across the organization, supporting their ability to make strategic decisions informed by expert security analysis; to support business continuity and service availability; to respond to changing business needs with agility and rigor; and to ensure security awareness throughout Twitter.

What you’ll do

  • Conduct reviews of the security posture of third party vendors to further Twitter’s business development partnerships, mergers and acquisitions, and vendor relationships.
  • Evaluate security solutions and provide direction to IT for technologies such as antivirus, application whitelisting, endpoint hardening and monitoring, sandboxing, and virtualization software.
  • Consult with engineering, networking, and infrastructure teams to harden Twitter’s products, systems, and corporate and production environments.
  • Respond to and investigate malware and intrusions.
  • Partner with teams across the company to build and design security into their systems.
  • Monitor and define events for Security Incident Event Management.

What you’ll need

  • Highly proficient at Security Analysis, including the following domains:
    • Formal Threat Modeling
    • Knowledge of Web Application Risks and Fundamentals
    • Architecture Review
    • Gap Assessment
    • Compensating Mitigations
  • Proficiency with scripting: Shell, Python, Ruby, or Perl.
  • Experience with SIEM (ArcSight, QRadar, Splunk)
  • Experience managing Windows security
  • Experience managing mobile device and endpoint security
  • Experience managing or configuring Mac OS X, Linux, or UNIX systems
  • Experience of securing remote offices in a variety of jurisdictional environments
  • Experience with Network and Computer Forensics, Malware Analysis

Minimum Requirements

  • B.S.  Computer Science or equivalent work experience
  • Strong understanding of TCP/IP stack, network security, and access control
  • A passion for security, privacy, and defending our users, both internal and external
  • Comfortable working in an open floor plan
  • Extensive knowledge of current Internet security issues and best practices.

Highly Desired

  • M.S.  Computer Science or equivalent work experience
  • Active Twitter API developer
  • Experience with security frameworks such as ISO 27001/2, PCI, SOX, ITGC
  • Experience defending against malware, phishing, and other attacks against a corporation
  • Contributions to public security research, presenting at security conferences, or blogging
 
 
 
 
 
 

No comments:

Post a Comment