Responsibilities

We are looking for an exceptional Enterprise Security Engineer to join our growing team. In this role, you will work closely with our Business Systems and Security Teams. You will have a lead role in monitoring and securing our cloud-based business systems. We are seeking a security-savvy person with experience in managing a diverse technical environment, developing and promoting best practices, monitoring systems, and proactively responding to security issues.

In this role, you will also be responsible to:

• Understand and remain up-to-date on Workato’s security measures, policies, and practices as well as industry trends and evolving standards.

• Provide guidance, policies and recommendations to internal teams on security best practices for systems and applications.

• Administer, set up, configure, and troubleshoot as needed internal business security applications.

• Author scripts, tools, and Workato based automations to streamline security operations.

• Monitor access to and activity in business systems to proactively detect and prevent security incidents.

• Evaluate and recommend new internal tools for system management and security.

• Respond to security incidents involving internal business systems.

• Maintain recordkeeping for audit purposes and assist Workato’s annual security audit.

Requirements

Qualifications / Experience / Technical Skills

• Bachelor’s degree in CS, Cybersecurity or a related field.

• 4+ years of experience working in security engineering and operations teams.

• Perimeter Security – Firewall, IPS, Proxy, email gateway, URL filtering etc.

• Endpoint Security – AV, Next Gen AV, EDR, Encryption, HIPS, Email Security (Dmarc), JAMF etc.

• Cloud Security – AWS experience is preferred, including native security controls in AWS, cloud security controls available on marketplace.

• Knowledge of all domains within security covering people, process and technology

• Solid understanding of security concepts, security policies, risks, and corresponding mitigation strategies.

• Ability to write bash, python scripts and automate ops tasks using security automation frameworks.

• Ability to create and automate Incident response plans on Internal endpoints and Cloud Assets

• Knowledge of IT Operations best techniques, including strategies, and technologies for monitoring, alerting, automation, and return-to-service strongly preferred.

• SOC/SIEM/MDR/Security Orchestration and Automation

• Good understanding of ITIL concepts Incident/Change/Problem and ticketing tools

• Familiarity with MacOS system administration.

• Familiarity with data warehousing systems especially Snowflake.

• Experience with ISO27001 certification or SOC-2 audit is a plus.

• Security certification (CSSLP, CISSP, GIAC, GSE for example) is a plus.

Soft Skills / Personal Characteristics

• Detail-oriented with superior organizational and time-management skills - balancing multiple projects, deadlines, and requests

• Ensuring high quality and timely delivery of features

• Demonstrate a strong sense of security operations ownership

• Driven with a can-do attitude and determination to succeed

• Excellent written and verbal communication skills