Information Security Engineer

Information Security EngineerLocation: Santa Clara, CA Position: OnsiteMandatory Areas Must Have Skills:Any recognized security certifications, e.g., CISSP, CISA, CISMMonitor internal and external threat landscape to update strategy and intellectual protection program roadmapProvide periodic reports to management team and key stakeholdersGood To Have Skills:Mandatory if Applicable Domain Experience (If any)Must Have Certifications:NPrior UST experience:NLocation: Santa Clara, CA, US (Onsite)Onsite Requirement - Y/N- YNumber of days onsite - 5 days in officeKey Responsibilities:Partner with various stake holder groups, including Product/Engineering, Legal, HR, and IT to promote and build a culture of security and implement controls accordinglyWork with Information Security and Information Technology teams to build & maintain controls to manage varied risks including application, insider and cyber risksMonitor internal and external threat landscape to update strategy and intellectual protection program roadmapWork with a global team to help implement and monitor security controls to proactively identify insider risk issues and application security issuesPartner with software development teams across Applied to incorporate and implement secure SDLC concepts such as training, security requirements, threat modeling, code/design reviews, and security testingPartner with software development teams to implement processes and tools to enable code analysis, vulnerability assessment, open source license complianceReview and update policies and provide training as needed to internal & external audienceProvide periodic reports to management team and key stakeholdersQualifications:Bachelor’s degree in Information Technology or related field3-4 years of management experience in information security or related field and overall, 7-10 years of information security experiencePrior experience in partnering with cross-functional teams to deliver impactful security initiativesPrior experience working on application security, product security, cyber security or managing insider risk initiatives preferredPrior experience with threat modeling, security design reviews, and security architectural conceptsAny recognized security certifications, e.g., CISSP, CISA, CISM etc.Working experience in a global company is preferredExcellent analytical and critical thinking skillsAbility to manage multiple projects with team members from various business units/functions and countriesAbility to work both independently and work within a team to analyze complex business problems and recommend solutionsAbility to travel periodicallyExpertise across common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT, NIST, including 800-53 and Cybersecurity Framework is preferredStrong interpersonal, writing, and communication skills; ability to clearly articulate and visually present complex advice to managers at all levels