Senior Information Security Specialist

The Senior Information Security Specialist will plan and carry out security measures to protect Company’s environments. The Senior Specialist will be responsible for identifying opportunities for improvement in security posture in collaboration with other security team members and other business units. The Senior Specialist will act as lead on security related projects and technologies and assuring the effective implementation and management of security tools as we continue to improve information security at Martinrea. The Senior Specialist will be responsible to provide daily support and on call rotation.**Required Education and Experience**:- BS Degree in Information Security, Cyber Security, Computer Science or equivalent- 5+ years of working experience in support of a large scale, mission critical enterprise security infrastructure- In-depth understanding of Cyber Threat Intelligence concepts- Knowledge and understanding of up to date security threats and common vulnerabilities and exploits, malware, attack paths, threat actor groups, etc- Experience with the OWASP Top 10, OWASP Top 10 proactive controls, and secure web development methodologies- Proficiency in a scripting language such as Python, PowerShell, or Bash- In dept knowledge of SMTP, SSL/TSL- Knowledge of SSO methodologies- Hands on experience in Endpoint Security tools (Trend Micro, Rapid7 MDR, Intune)- Experience with vulnerability scanner tools (such as, Rapid7 MVM, Qualys, Nessus)- Strong knowledge and hands on experience on core IT and security, infrastructure, AD, DNS, DHCP, NGFW, IPS, IDS and SIEM- Experience with MS O365, Azure security, MFA, CyberArk and MDM are required- Excellent knowledge with current operating systems (Windows, UNIX, AIX, OS X and Linux), network and web related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)- Knowledge of security industry standards and certification frameworks such as ISO 27001, PCI, HIPPA, etc.- Preferred to have: CISSP**Essential Functions**:- Extensive work experience in the field of information/software security- Deep knowledge and understanding of software weaknesses (CWE, OWASP)- Cryptography and networking protocols- Extensive theoretical and technical knowledge of Endpoint/Server security, Application defense strategies, Application-level security, Storage and Network configuration security, Identity, and Authentication strategies, and technologies- A solid grasp of web security and Window’s internals- Detailed understanding of securing the end-to-end image/container lifecycle from image build to production deployment- Analysing requirements for security tools and technology (SIEM, Endpoint Protection, Vulnerability Management, DLP, perimeter security, DDoS, other)- Experience with multiple programming languages (such as, Java, C++, Phyton, VB, PowerShell, HTML, PHP, Angular, Xamarin etc- Knowledgeable in risk assessment frameworks, threat mitigation strategies, vulnerability management, active threat monitoring, audit and compliance- Develop required documentation to help operationalize and automate technologies in close coordination with security operations to ensure compliance requirements are met- Continuously identify areas needing improvement, create action plans, and execute to implement changes in a timely mannerTipo de puesto: Tiempo completoSalario: $70,000.00 - $85,000.00 al mesBeneficios:- Días de maternidad superiores a los de la ley- Horarios flexibles- Seguro de gastos médicos- Seguro de gastos médicos mayores- Servicio de comedor- Servicio de comedor con descuento- Teléfono de la empresa- Trabajar desde casa- Vacaciones superiores a las de ley- Vales de despensaHorario:- Turno de 8 horas