Principal Security Engineer

Key

Security

Monitoring - Security Tool Design and Development

–Conducts

security assessments of various products and services, analyzing potential

vulnerabilities and recommending mitigation strategies.

–Develops

advanced testing tools and methodologies to proactively identify and address

security weaknesses.

–Conducts

• in-depth security design and coding (e.g., reviewing code, writing code for
• complex investigation), providing advanced guidance and recommendations for
• improvement.

–Participates

in reviews of security alerts.

Event

Response

–Uses

expertise to recognize and escalate complex security violations, ensuring

prompt response and resolution.

–Takes

appropriate action to contain and mitigate security events, coordinating with relevant

teams and stakeholders.

–Contributes

to post-event reviews, providing insights and recommendations for strengthening

event response processes.

Compliance

–Contributes

to compliance assessments, evaluating the effectiveness of security controls

and processes.

–Reviews

security compliance deliverables, providing recommendations for enhancing

adherence to internal and external obligations.

–Ensures

compliance with internal and external obligations, collaborating with relevant

stakeholders to implement necessary measures.

–Ensures

inventory systems are maintained and remain compliant from a security

perspective.

Business

Continuity Support

–Provides

guidance on business continuity and disaster recovery plans, processes, and

procedures, considering potential risks and vulnerabilities.

–Ensures

the execution of business continuity plans to support critical systems and data

during disruptions, implementing appropriate measures and controls.

–Assesses

readiness for certification and/or audit, providing insights and

recommendations for enhancing preparedness.

Data

Security and Privacy

–Recommends

• best practices and independently applies data security tools and techniques,
• such as encryption, hashing, masking, and access management, to ensure the
• confidentiality and integrity of sensitive information.

–Conducts

thorough reviews of documentation and procedures related to data security,

identifying and recommending improvements to enhance overall security posture.

Research

and Innovation:

–Applies

• industry security knowledge through engagement in research activities and
• collaboration with colleagues to contribute to the development of innovative
• security solutions.

–Stays

updated on emerging trends and evolving threats, identifying potential

implications for the organization and recommending appropriate actions.

–Explores

and evaluates novel techniques and technologies to address complex security

problems.

Core

Responsibilities

Planning

& Execution

–Manages

• and coordinates moderately complex tasks, monitoring timelines and deliverables
• to ensure timely completion and adherence to requirements for a moderately
• sized project or initiative.

–Efficiently

• delegates, monitors, and prioritizes work across multiple projects, providing
• technical oversight and adjusting plans to address shifts in resources or
• timelines.

Collaboration

& Partnership

–Collaborates

across the organization to align on expectations and achieve shared objectives.

–Leverages

understanding of business leaders, stakeholders, and/or customers to ensure

proposed solutions meet their needs.

–Supports

inclusivity by actively seeking and listening to diverse perspectives, ensuring

others feel heard and respected.

Problem

Solving

–Identifies

and addresses moderately complex issues by analyzing a wide range of data

and/or information to identify solutions in accordance with standard practices.

–Proactively

• escalates unresolved or critical issues with a thorough assessment and suggests
• potential solutions.
• –Reviews,
• contributes to, and documents problem solving strategies.

Learning

–Pursues

learning opportunities to expand knowledge and skills and/or tools in new areas

and stays abreast of the latest industry trends and best practices.

–Proactively

seeks and leverages ongoing feedback and training to improve skills.

–Coaches

and mentors junior team members, fostering continuous learning and knowledge

sharing within and across teams.

Continuous

Improvement

–Develops

• ideas, recommends updates, and/or collaborates on the implementation of process
• improvements to increase the efficiency and effectiveness of processes,
• protocols, and workflows across teams, and evaluates the impact on key
• stakeholders.

–Solicits

feedback from others on ideas for alternative approaches and methods for

continued improvement.

Performance

and Development:

–Contributes

to the talent development pipeline by participating in candidate interviews,

assessing candidates, and providing hiring recommendations.