Security Engineer II

Coinstar’s Security Engineer II is responsible for the design, implementation and maintenance of security solutions to include email security, network security including firewall management, endpoint protection,  and vulnerability management.  Additional responsibilities in identity management, data protection management and threat hunting will be a shared set of responsibilities with other team members.

Key Responsibilities

• Design, configure and support firewalls, virtual private networks, intrusion detection/protection systems, and zero-trust architecture.
• Analyze real-time network traffic, investigate security alerts, and perform incident management activities in partnership with Coinstar’s managed defense partner.
• Conduct recurring security audits, risk assessments, and penetration testing to address vulnerabilities as a part of the larger Coinstar vulnerability program.
• Enforce security policies and maintain compliance using SOC 2 Type II requirements as the framework.
• Oversee Coinstar’s email security controls and respond to potential phishing scenarios as well as help conduct phishing tests.
• Manage ongoing endpoint protection services including patching and incident response when required inclusive of mobile device management.
• Spearhead addressing vulnerabilities across all applicable layers using severity and impact to prioritize response.
• Expand monitoring and alerting where applicable using Coinstar’s observability solutions.
• Participate in technical design reviews and security assessments during project execution.
• Respond to third party risk assessment questionnaires.
• Perform off hour support activities when required.
• Work with team members in support of evolving Coinstar identity services and data protection services.

Education & Experience

• Bachelor’s degree in Computer Science, Engineering or related field required; advanced degree preferred.
• 3+ years of experience with hands on security engineering responsibilities.
• 2+ years of Microsoft Azure native security and network experience.
• GSEC certificate preferred.
• Microsoft certificates such as AZ-500 and/or SC-900 desired.
• Experience with Okta enterprise authentication desired.
• Experience with Auth0 consumer authentication desired.
• Experience in SOC2 Type II controls and associated audits a plus.

Knowledge, Skills & Abilities

• Knowledge of PowerShell and Python 3.
• Hands on knowledge of system security, with focus on Linux, Windows, and Network Devices.
• Knowledge of Terraform or similar infrastructure as code (IaC).
• Solid understanding of modern security controls and APT defenses.
• Knowledge of feeding applicable logs to SIEM for event management.
• Knowledge of investigating SIEM alerts to ascertain needed response.
• Knowledge of methods for modern threat hunting.
• Ability to assess and configure network traffic for route optimization, security concerns and packet loss.

Business Travel

• Position requires minimal to no travel.

Pay and Benefits

The typical starting salary range for this position is between $117,308-$146,635 per year. Coinstar utilizes geographically based pay ranges, within the United States, which allows us to pay competitively and consistently based on location. Within the range for the applicable geographic area, individual pay is determined by several factors, including job-related skills, experience, and relevant education or training. Your recruiter can share the salary range specific to your location. Employees in this position have the potential to increase their base salary up to $175,963 per year, which is the max end of the range, based on ongoing demonstrated and continuous performance in the role. Short-Term incentives are a part of the total compensation package and are based on Company and Individual performance.

We believe that continued good health, financial security, and work-life balance are important.  Coinstar is proud to offer a complete, progressive benefits package including:

• Health & Wellness Coverage – Three outstanding medical plans to choose from, along with dental and vision insurance, Short- and Long-Term Disability Insurance, and Life Insurance. 
• Retirement Savings – Traditional and Roth 401(k) plans with a company-match that immediately vests.
• Paid Time-Off – PTO accruals begin at 18 days per year, plus 10 company holidays and 2 floating holidays annually.  Additionally, we offer paid parental and adoption leave.
• Other Perks and Benefits – A generous Corporate Matched Giving plan and an Employee Assistance Program.
• Work Environment – We offer a casual and flexible work environment with work from home options.

EEO Statement

 We are Coinstar because of our people. We value and embrace their unique and diverse talents, perspectives and experiences and strive to build an environment where everyone can bring their best self to work.  We are an Equal Opportunity Employer. Coinstar will ensure that persons with disabilities are provided with reasonable accommodations. If reasonable accommodation is needed, please contact our Human Resources team via [email protected].  We believe that diversity and inclusion make us a better, more innovative, and successful company, and we seek to recruit and retain a diverse talent pool.  Even if you do not meet every qualification, we encourage you to apply.

Physical Requirements

Sedentary work involves remaining in a stationary position most of the time in front of a computer, using a keyboard, mouse and telephone.  Regularly operate a computer and other office equipment.  Occasionally move about the work site to access file cabinets, office equipment, etc.  Exert up to 10 lbs. of force occasionally, and/or a negligible amount of force frequently or regularly move objects.  Communicate and exchange information with co-workers and other individuals in person and electronically.

Fair Chance Employment

Coinstar is committed to fair and equitable employment practices. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable federal, state, and local fair chance laws and ordinances, including the Washington Fair Chance Act, California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, and San Francisco Fair Chance Ordinance.

WA Applicants: Washington law prohibits employers from obtaining criminal record information before an applicant is determined to be otherwise qualified and receives a conditional offer of employment. For more information, see RCW 49.94.010(1),(3)-(5) and the Attorney General’s Washington Fair Chance Act Guide for Employers and Applicants.

This job description is not intended to be all-inclusive. Employee may perform other related duties as assigned to meet the ongoing needs of the organization.