Virtru Security Engineer

The Opportunity

As a Virtru Security Engineer, you will play a critical role in the world of zero trust. You will support the cyber architecture development, implementation, and sustainment across multiple networks of different classification levels. You will interface with stakeholders and engineering teams to delve into the details and dependencies of critical processes and users’ roles within them. You'll lead security compliance initiatives and automation of control validation across our cloud environments using Infrastructure as Code, including Terraform or Ansible. You'll build security automation for CI/CD pipelines, including vulnerability scanning and compliance validation. You'll conduct regular security reviews and risk assessments of cloud infrastructure and applications. You'll collaborate with development and operations teams to implement security controls without impeding velocity. You'll develop and maintain security monitoring solutions and respond to security events. You'll create and maintain security documentation, training, and guidelines for engineering teams.

Key Responsibilities

• Support cyber architecture development, implementation, and sustainment.
• Interface with stakeholders and engineering teams.
• Lead security compliance initiatives and automation of control validation.
• Build security automation for CI/CD pipelines.
• Conduct regular security reviews and risk assessments.
• Collaborate with development and operations teams to implement security controls.
• Develop and maintain security monitoring solutions.
• Respond to security events.
• Create and maintain security documentation, training, and guidelines.

Requirements & Tech Stack

• Experience designing, deploying, and configuring data security solutions.
• Experience with data security tools such as Virtru.
• Experience with data-centric security models, including maintenance.
• Experience designing, implementing, configuring, operating, or testing IT systems or security infrastructure.
• Experience deploying and troubleshooting Kubernetes and Docker.
• Experience with data tagging and classification.
• Knowledge of Zero Trust principles and solutions.
• Secret clearance.
• HS diploma or GED.

Nice to Have

• Experience with Data Security Posture Management (DSPM) such as BigID, Forcepoint, Ping, or SailPoint.
• Experience in security automation using Terraform or Ansible, and languages, such as Go, Python, or Node.js.
• Experience with infrastructure scanning tools and security monitoring solutions, such as CNAP, SIEM, CSPM, and CWPP.
• Knowledge of federal or DoW information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems.
• Completion of DoW 8140 requirements.