Note: The job is a remote job and is open to candidates in USA. MoneyGram is a global payments network built to move money across borders with speed, simplicity and trust. We are seeking a Senior Information Security Engineer to serve as a hands-on team member, ensuring the availability, confidentiality, and integrity of IT systems by implementing security controls in the environment.
Responsibilities
- Implement and configure security tools such as EDR, Email security, SOAR, and SIEM
- Enable alert use cases in accordance with MITRE attack framework
- Evaluate detection use cases for effectiveness and make changes accordingly
- Evaluate control gaps and recommend technologies to fill them
- Evaluate potential new tools and vendors
- Evolve security controls based on real world attack strategies
- Monitor environments and respond to security detections
- Work with security analysts to enrich detection data and confirm validity of incident
- Prepare post incident reviews and brief security leadership on response actions
- Implement and maintain cloud visibility and scanning tools
- Build and implement cloud environment scanning and detection methodology
- Prioritize findings for remediation
- Identify repetitive tasks and automate for efficiency
- Use scripting tools to aid in security tool implementation
- Leverage API integrations to aid in pulling in tool data
- Collaborate with peers across IT and security to plan remediation activities
- Communicate program status to security leadership
- Help foster a strong security culture where security is viewed as an enabler and not a blocker
Skills
- Bachelor's degree in computer science or related field; or equivalent post high school education and/or work-related experience
- At least 3 years of experience in a security engineer role
- At least 3 years of experience with implementing SIEM and EDR
- Experience with tools such as Tenable, Qualys, Rapid 7, Carbon Black, CrowdStrike, Splunk, Torq, Darktrace, Abnormal, Proofpoint or Mimecast
- Background in vulnerability management including remediation prioritization
- Scripting experience with Bash, Python or PowerShell
- Experience securing a regulated environment, PCI, GDPR, ect
- Strong bias toward AI-driven automation and scalable security solutions
- Experience with one or many of the following areas of security technologies: Vulnerability management tooling, EDR tooling, Email Security tooling, DLP technologies, Edge detection technologies, Cloud native security technologies, SOAR and or hyper automation, SIEM technologies and use case enablement
- Solid knowledge of security risks/threats to large organization systems and networks, and ability to address those threats
- Experience with scripting, programming, and AI-driven, automation technologies
- Experience with designing controls to meet regulatory compliance such as PCI, SOC, and SOX
- Strong problem-solving skills and ability to analyze and resolve problems
- Ability to translate complex technical information across all levels of the organization
- Strong relationship-building skills with business stakeholders
- Excellent interpersonal, communication, and presentation skills
- Preferred Certifications – CISSP, CCSP, AWS certified security, Azure Security Engineer
Benefits
- Remote first flexibility
- Generous PTO
- 13 Paid Holidays
- Medical / Dental / Vision Insurance
- Life, Disability, and other benefits
- 401k with competitive Employer Match
- Community Service Days
- Generous Parental Leave
Company Overview