Principal Security Engineer

About This Role

This role involves managing the end-to-end security lifecycle of internal IT applications and databases, focusing on automating and auditing user access provisioning, ensuring security compliance, and optimizing security measures across various platforms. The position requires a strong background in security auditing, particularly in SOX-compliant environments, and expertise in Identity and Access Management (IAM) tools.

Responsibilities

• Oversee the security and compliance of internal IT applications and databases throughout their lifecycle
• Automate and audit user access provisioning and deprovisioning processes
• Implement and manage security tools and configurations for database security
• Ensure applications and databases are secured in alignment with industry standards and internal policies
• Work closely with cross-functional teams to monitor and respond to security incidents
• Utilize programming skills (PL/SQL, Java, Python) to develop and optimize security features and tools
• Collaborate with the IT team to integrate security measures into the application and database infrastructure
• Support the organization's compliance efforts, including adherence to SOX and other regulatory frameworks
• Conduct regular security assessments and audits to identify and remediate vulnerabilities
• Stay current with emerging security threats and best practices to ensure a proactive security posture

Requirements

• Proven experience in IT security, specifically with applications and databases
• Solid experience with security auditing, preferably in a SOX-compliant environment
• Strong knowledge and hands-on experience with Identity and Access Management (IAM) tools
• Understanding in programming languages such as PL/SQL, Java, and Python, with a focus on security-related functionality
• Experience with database security tools and configurations
• Familiarity with security monitoring tools and frameworks

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience)
• Proven experience in IT security, specifically with applications and databases

Nice to Have

• Familiarity with regulatory frameworks and standards (e.g., SOX, GDPR)
• Prior experience in a security operations or security development role

Skills

* Required skills

Benefits

Certifications