Job Information
Ivalua Senior Cloud/Infrastructure Security Engineer in NEW YORK CITY, New York
Apply NowSenior Cloud/Infrastructure Security Engineer at Ivalua (View all jobs)
New York City, NY
Senior Security Engineer
(New York City - NY)
Founded in 2000, Ivalua is a leading global provider of cloud-based procurement solutions.
COMPANY OVERVIEW
At Ivalua we are a global community of exceptional professionals, who believe that digital transformation revolutionizes supply chain sustainability and resiliency to unlock the power of supplier collaboration.
We achieve this through our leading cloud-based spend management platform that empowers hundreds of the world's most admired brands to effectively manage all categories of spend and all suppliers to increase profitability, improve ESG (environmental, social, and corporate governance) performance, lower risk, and improve productivity. Driven by our passions and fueled by our shared ambitions, we empower and challenge each other to create meaningful experiences for our colleagues, customers, partners, and communities.
Learn more atwww.ivalua.com. Follow us onLinkedIn (https://www.linkedin.com/company/ivalua) andTwitter (https://twitter.com/ivalua) .
THE OPPORTUNITY
CONTEXT:
Our team is dedicated to serve our clients post going-live the best way we can to secure an exceptional client experience.
With over 10 global team members, Infosec team needs to work with IT and R&D teams to keep our enterprise-class SaaS service secure from a variety of threats.
ROLE:
This is an exciting opportunity for a Senior Security Engineer role at Ivalua. You will engineer, implement, review and monitor technical security controls to protect and enhance the security of our hosting and corporate infrastructure, networks and applications. You will also help with operational security aspects which will include performing security reviews on infrastructure changes, reviewing firewalls rules, analyzing results from vulnerability or penetration testing reports, investigating security events by analyzing logs and identifying actionable plans to address in the infrastructure.
WHAT YOU WILL DO WITH US
Identify, implement and lead the technical security projects to mitigate the risks on our hosting and corporate infrastructure such as Azure Entra Conditional Access Policies, AD security, Infrastructure as Code security, CSPM deployment etc.
Perform security design, architecture, change and/or configuration reviews on our hosting and corporate infrastructure systems including Azure cloud environments, network devices, endpoints, and security technologies deployed (CNAPP, MDM, WAF, DDoS, etc.)
Support the network and cloud vulnerability management activities including scanning, internal and third-party penetration testing and analysis of reported security findings
Collaborate with the SOC team to enhance our detection and response processes and capabilities
Build and implement a threat intelligence program by developing threat intelligence processes and tooling to protect our brand, monitor our external attack surface and detect sensitive data leaks
Provide support to the GRC team on the technical security controls related to compliance initiatives such as FedRAMP, PCI, NIST 800-53 r5, IRAP, SANS CIS 20 etc.
Assist customer and prospect facing teams with technical security questions related to the Ivalua hosting infrastructure and cloud security
Act as the SME on infrastructure and cloud security topics, expand and develop sharing of technical knowledge and collaborate with multiple internal teams to review and improve the technical architecture and efficiency of IT and security operational processes
YOUR PROFILE
If you have the below experience and strengths this role could be for you:
Skills and Experience:
At least 5+ years of hands-on experience on infrastructure and network security engineering / architecture, protocols and technologies like CNAPP, CSPM, MDM, IAM, DDoS
At least 5+ years of hands-on experience in assessing infrastructure, network and cloud security
Experience with scripting (such as Python, PowerShell etc.)
Knowledge of Active Directory (key concepts, protocols, services, tiering, main attacks, best practices for hardening etc.)
Knowledge of Cryptography concepts, encryption algorithms, protocols, keys and certificates management
Hands-on experience with security concepts on Azure cloud environments and services (Azure EntraID, Azure Key Vault, Azure encryption, Azure Sentinel, NSG, Azure firewall etc.)
Experience with security standards and compliance programs such as OWASP, NIST, FedRAMP, PCI, SANS CIS 20
Experience with security incident response and investigation
Experience with threat intelligence operations and tooling
An Information Security qualification or evidence of starting to work towards e.g CISSP, OSCP, AZ-500, GIAC GPEN or similar certification
Soft Skills :
Ability to foster collaborative, open and working relationships with technology and other stakeholders
Ability to handle multiple tasks, prioritize and meet deadlines
Ability to foster collaborative, open and working relationships with technology and other stakeholders
WHAT HAPPENS NEXT
If your application fits this specific position’s needs, our skilled Talent team will reach out to schedule an initial screening call. Get one step closer to achieving your goals – apply today!
Our Talent team will guide you through every step of the interview process - from preparation to completion. They're here to support you!
Our recruitment process is designed to assess your competencies through a series of personalized interviews with internal stakeholders relevant to the role.
Interviews will be conducted virtually via video or on-site with face-to-face meetings.
LIFE AT IVALUA
Hybrid working model (3 days in the office per week)
We're a team dedicated to pushing the boundaries of product innovation and technology
Sustainable Growth, Privately Held
A stable and cash-flow positive Company since 10 years
Snacks and weekly lunches in the office
Feel empowered to pursue your goals with improved team collaboration and increased creativity/productivity
Unlock and unleash your full professional potential with our exceptional training and career development program
Join a dynamic and international team of top-notch professionals who are experts in their respective fields. Collaborate with like-minded individuals who are deeply passionate and highly motivated about their work. Experience a truly diverse and inclusive work environment where your unique contributions are highly valued
Regular social events, competitive outings, team running events, and musical activities,
Comparably recognized Ivalua for the following (https://www.comparably.com/companies/ivalua) :
Powered by People - Powered by You!
United by our values we embrace diversity and equity in the broadest possible sense to create an inclusive workplace. To help our customers make supply chains more efficient, sustainable and resilient, we rely on a global team with a variety of backgrounds, skills and views. We believe in equal opportunity and in diversity as a driver of innovation that cultivates a spirit of inclusiveness, creates a productive and fun place to work, and provides fulfilling career opportunities for all Ivaluans.https://www.linkedin.com/company/ivalua/about/
Experience life at Ivalua - check out our captivatingvideo (https://www.youtube.com/watch?v=irkygoq3kCc&t=4s) ! Gain insight into our unique company culture and get a glimpse of what it's like to work with us.
Ivalua’s core values include a priority on Care & Grow People. We take matters like pay equity very seriously and strive to reward our employees appropriately and fairly for their talents.
The compensation range for this position reflects the cost of labor across our US locations and is based upon careful and continual market research. In addition to location, compensation may also vary based upon job-related knowledge, skills, and experience.
Title: Senior Security Engineer
Range minimum: USD 112000
Range maximum: USD 208000
Additional compensation / rewards: Ivalua also offers exceptional benefits including medical, dental, vision and transportation.