Job Description

Full job description

Stefanini Group is hiring!

Stefanini is looking for a Cyber Security Consultant, Dearborn, MI (Hybrid)

For quick apply, please reach out Parul Singh at parul.singh@stefanini.com/ 248-582-6481

Cyber Security team is seeking a fun, energetic and organized individual. Our group is the Information Security team, and you can make an immediate impact within this organization.

Responsibilities

• Act as a senior subject matter expert for secure coding, evaluating, and implementing [MR1] processes to mature application security leveraging existing tools.
• Provide consulting services to all product teams, providing advocacy, guidance and education on code security related problems by leveraging enterprise services across product lifecycles, identifying vulnerabilities and implementing secure solutions.
• Help define security standards around CI/CD pipelines, SAST/SCA/DAST testing processes, DevSecOps principles.
• Design, develop and test automation components for products and software, especially security related.
• Facilitate getting all known control gaps identified and develop control improvement plans to raise operational maturity in partnership with Internal Controls team as part of GRC processes.
• Partner with Cyber Defense during incident response for teams, as required.
• Support and develop automation solutions that enable our product teams to build and deploy code quickly while giving them insights into security findings. Leverage cloud technology to promote fast provisioning and scalability with secure configuration management and monitoring.
• Implement industry best practices for container hardening and API configuration management.
• Cross between technology and business topics with ease and understanding being able to explain security topics to any audience. Operate independently and adapt to dynamic needs of the organization and changing teams.

Experience Required:

• 4+ years' experience in cybersecurity analysis, vulnerability management, security consulting, secure software engineering.

Experience Preferred:

• Experience supporting cloud-based platforms in an enterprise environment such as: Google Cloud Platform (GCP), Microsoft Azure, and Amazon Web Services (AWS).
• Experience using 1 or more SAST/SCA tools like CheckMarx, FOSSA, 42Crunch or BlackDuck Strong working knowledge of Info Sec policy, global purchasing policies and process, GRC component assessment, controls testing, etc.
• Strong understanding of the OWASP Top 10 security vulnerabilities and remediation techniques Working knowledge of a variety of regulations, control frameworks, and requirements, such as SOX, NIST 800-53, NIST 800-171, ISO 27001 Working knowledge of API Security coding experience with languages like Java, Java Script, Python, Ruby or equivalent Strong understanding of Security Engineering concepts around key management, authorization, Cloud Security etc.
• Security architecture experience collaborating with software product teams.
• Experience with Git/GitHub or equivalent source control repositories.
• Experience using a centralized logging solution such as Splunk or Datadog for monitoring and reporting. IT operations, security, and/or infrastructure experience in an enterprise environment.
• Experience with vulnerability management with understanding of CVEs, CWEs and how to research and manage risks.
• Comfortable communicating with different levels and audiences effectively to gain attention collaboratively while not causing panic or animosity.
• A strong drive to keep learning new tools, ideas, techniques and methodologies to change culture to one based on building security and privacy into solutions from inception.
• Certifications are highly valued (CISSP, CISA, CISM, etc.)

Education Required:

• Bachelor's degree in business, Cyber Security, IT management, Risk Management, Computer Science, or Computer Engineering or any related field

Education Preferred:

• Master's degree in cyber security, Computer Science, Software Engineering, or a related field.

**Listed salary ranges may vary based on experience, qualifications, and local market. Also, some positions may include bonuses or other incentives***

Stefanini takes pride in hiring top talent and developing relationships with our future employees. Our talent acquisition teams will never make an offer of employment without having a phone conversation with you. Those face-to-face conversations will involve a description of the job for which you have applied. We also speak with you about the process including interviews and job offers.

About Stefanini Group

The Stefanini Group is a global provider of offshore, onshore and near shore outsourcing, IT digital consulting, systems integration, application, and strategic staffing services to Fortune 1000 enterprises around the world. Our presence is in countries like the Americas, Europe, Africa, and Asia, and more than four hundred clients across a broad spectrum of markets, including financial services, manufacturing, telecommunications, chemical services, technology, public sector, and utilities. Stefanini is a CMM level 5, IT consulting company with a global presence. We are CMM Level 5 company.

Job Tags

Similar Jobs