Security Engineer II
Job Details
Description
Are you a proactive security professional with a passion for staying ahead of threats? Do you thrive on enhancing system boundaries, building innovative tooling, and fostering a strong security culture? If so, arrivia wants you to join our team as a Security Engineer II !
At arrivia , we're not just about travel; we're about making brands better through the power of travel. With a rich history spanning over 55 years and a global presence, we're a leading force in the industry. As a Security Engineer II, you'll play a crucial role in safeguarding our corporate and product security posture, ensuring our systems and data are protected as we continue to innovate and grow.
What You'll Do: Your Mission to Secure Our Systems
Responsibilities
As a Security Engineer II, you'll be at the forefront of our security efforts, working hands-on to implement, maintain, and enhance our security infrastructure. Your responsibilities will include:
• Protecting Our Digital Footprint: Provide expert technical services to integrate and secure shared, centralized, and networked systems.
• Deploying Cutting-Edge Defenses: Assist with the secure setup and management of critical security systems, including:
• Endpoint Detection and Response (EDR)
• Data Loss Prevention (DLP)
• Network Anomaly Detection
• Cloud Access Security Brokers (CASB)
• Security Information and Event Management (SIEM)
• And other essential security solutions.
• Empowering Our Technical Teams: Offer vital information security services and guidance to network, systems, and database administrators across the organization.
• Staying Ahead of Threats: Proactively evaluate bug reports, exploit notices, and security advisories from various sources, recommending and implementing precautionary measures as needed.
• Hunting for Vulnerabilities: Utilize vulnerability identification software and tools to pinpoint configuration errors, patch requirements, and other security-related changes.
• Building Our Defense Toolkit: Compile, maintain, and document software and tools to trace and investigate attacks on arrivia systems.
• Responding to Incidents: Act as a key technical resource during security incident investigations and forensic analyses, leveraging your in-depth knowledge of security systems, common exploits, and countermeasures.
• Joining Our Elite Response Team: Be an active member of our incident response team, contributing to rapid and effective security incident resolution.
Who You Are: The Skills and Experience We're Looking For
Role
You're a seasoned security professional with a strong technical background and a passion for continuous learning. To succeed in this role, you'll bring:
• Education & Experience: A Bachelor's degree in MIS, Computer Science, Cybersecurity, Engineering, or a related field, OR a minimum of 5 years of experience in an IT or IT Security position.
• Microsoft Security Savvy: Hands-on experience configuring and managing Microsoft Defender, Sentinel, Intune, Cloud Security Posture Management, and other security services across Azure products.
• Network & Security Expertise: At least 5 years of experience in networking and/or security.
• Deep Security Engineering Knowledge: Significant experience and technical knowledge in security engineering, troubleshooting, system and network security, authentication and security protocols, cryptography, and application security.
• Encryption Mastery: Significant experience with encryption standards such as AES, SSL, and TLS.
• SIEM Proficiency: Significant experience working with SIEM systems.
• Protocol Prowess: Significant experience with network and web-related protocols (e.g., TCP, UDP, ICMP, IPSEC, HTTP, HTTPS).
• Incident Response Champion: Significant experience with incident management and threat remediation, including threat analysis, isolation, identification, and eradication.
• Compliance Consciousness (Plus): A strong understanding of ISO 27001/27701, HIPAA, PII, and PCI security principles is a plus.
• Privileged Identity Management (PIM) Expert: Significant experience with PIM tools, principles, and leading practices, including password/key vaulting technologies like Microsoft PIM, CyberArk/Conjur, Thycotic Secret Server, etc.
• Threat Intelligence Guru: A strong understanding of current and emerging technology issues, including security trends, vulnerabilities, threats, and attacker tactics, techniques, and procedures (TTPs).
• Innovative Problem Solver: Experience in developing or researching technical solutions and new security tools to mitigate vulnerabilities and automate tasks.
• Clear Communicator: Ability to translate complex technical issues into understandable language for diverse audiences.
• Security Advocate: Passionate about security and actively involved in the security community.
• Certifications:
• Required: CCNP-Security or CISSP certification.
• Preferred: CISM or CISA.
Who We Are: Your New Adventure Awaits
Welcome to arrivia , where we transform brands through the power of travel! We're the exciting merger of three industry powerhouses: ICE, SOR Technology, and WMPH Vacations, bringing over 55 years of combined experience to the table. With offices across the US and around the world, we're a diverse and passionate team united by our love for travel.
Our focus is on cultivating a customer-first culture, delivering exceptional travel experiences for our members at every step of their journey. We're on a mission to help people around the world travel better and experience more, and we're looking for talented individuals to join us on this adventure.
Our Core Values
At arrivia , we live by these principles:
• Stay Curious: Explore new challenges and embrace opportunities to learn, grow, and improve.
• Keep it Real: Build trust through open, honest, and clear communication.
• Own it: Seek ways to make a positive impact and take decisive action.
• Win Together: Foster a culture of connection and inclusion where everyone can thrive.
Travel Arrangements
Information Technology
Full-time