Security Engineer II

Sorry, this job was removed at 3:40 p.m. (PST) on Thursday, May 9, 2019
Find out who's hiring in Bellevue.
See all Cybersecurity + IT jobs in Bellevue
Apply
By clicking Apply Now you agree to share your profile information with the hiring company.

About Us:

At DreamBox, we believe all children can excel at learning, no matter where they start, where they live, or who they are. Along with district administrators, teachers, principals, and parents, we are dedicated to helping children realize their potential. Yet every child must be challenged, encouraged, and engaged in an individual way.

 

That’s why we developed our revolutionary Intelligent Adaptive Learning™ technology, and combined it with a rigorous curriculum and an engaging game-like environment, to change the learning paradigm. If you are interested in learning more, take a look at this recent efficacy article published by Business Wire.

Position Summary:
DreamBox is currently seeking a Security Engineer to advance our security program within the Technology Group and across the entire company. This role requires an individual who is at home working with all elements within a successful security program: from providing awareness training to staff, to creating and updating security policy documents, to reviewing and acting on the output from security dashboards. DreamBox makes a promise our customers: we will protect your sensitive information. The ideal candidate for this position will be able to bring together people, policy and tools to help us continue to meet that promise with confidence.
As a Security Engineer, you will continuously review our security posture, analyze our systems, and voraciously consume security guidance from experts, vendors, security tools and government regulators. You’ll bring together those sources and add your own insights to keep DreamBox several steps ahead of bad actors. You’ll add energy and range to our security awareness program, fighting those most feared opponents of the security team: apathy, ignorance, and inertia. Throughout all of this, you’ll ensure that we maintain the rigor and precision that turns good security planning into actual security.
What You'll Need to be Successful:

  • 2 years or more of experience in an information security role
  • Experience designing secure networks, systems and application architectures
  • Experience planning, researching and developing security policies, standards and procedures
  • Broad and detailed experience with computer forensic tools, technologies and methods, including anti-virus software, intrusion detection, firewalls and content filtering
  • Test Automation design, configuration and operation
  • Configuration automation (Chef, Puppet, Ansible)
  • Preference to candidates who have a security certification, such as CISSP, ISSEP, or Certified Ethical Hacker (CEH)
  • Git and various hosted Git implementations (GitHub, BitBucket)

Knowledge:

  • Outstanding interpersonal and communication skills
  • Robust problem-solving skills
  • Knowledge of potential attack vectors such as XSS, injection, hijacking, social engineering, and so on
  • Working knowledge of compliance standards such as FERPA, COPPA, GDPR, and ISO 27000
  • OWASP (Open Web Application Security Project) Top Ten Risk Factors

Competencies:

  • Intermediate-level expertise with risk assessment methodology and risk analysis preparation
  • Intermediate-level AWS Cloud configuration, particularly monitoring and security components
  • Intermediate-level setup and configuration of vulnerability detection software, such as Nexpose, Nessus, Threat Stack, or AWS Inspector
  • Advanced-level expertise with Microsoft Word and Excel, including templating and style sheet use

What to Expect:

  •  Identify and define system security requirements to develop information security plans and policies
  • Test for security vulnerabilities, up to and including conducting penetration testing
  • Develop and carry out information security plans and policies
  • Develop strategies to respond to and recover from a security breach
  • Prepare and present awareness training to internal staff on information security standards, policies and practices
  • Lead incident response, including steps to minimize the impact and then conducting a technical and forensic investigation into how the breach happened and the extent of the damage
  • Configure and troubleshoot security infrastructure devices
  • Develop technical solutions to automate security testing and audit tasks
  • Stay up to date with latest security technology and trends
  • Perform regular audits and provide reports

This is a startup environment. You need to be able to quickly and reliably separate signal from noise. We are a team of self-motivated engineers and micro-management doesn’t work well here. We work in high-availability; mission-critical operations environment where everyone is moving at the speed of light and solid communication at all levels and across teams is key. As is a sense of humor. We love the work we do!
DreamBox Learning is committed to hiring a diverse work team of constant learners.
Relocation support is not available for this position.

Read Full Job Description
Apply Now
By clicking Apply Now you agree to share your profile information with the hiring company.

Location

Located in the growing tech scene of DT Bellevue, employees get the best of both worlds with access to metropolitan amenities & PNW scenery.

Similar Jobs

Apply Now
By clicking Apply Now you agree to share your profile information with the hiring company.
Learn more about DreamBox Learning (A Discovery Education Company)Find similar jobs