Principal Security Engineer

Job Purpose:

• The Principal Security Engineer at AUTOTEC is responsible for leading the design, implementation, and maintenance of the company's security infrastructure. This role requires a deep understanding of security protocols, risk management, and the ability to anticipate and mitigate potential threats. The Principal Security Engineer will play a critical role in ensuring the safety and integrity of AUTOTEC's digital assets and data.

Key Responsibilities:

• Lead the development and implementation of security policies, standards, and procedures to safeguard AUTOTEC's systems and data.
• Conduct regular security assessments, audits, and risk analysis to identify vulnerabilities and implement corrective measures.
• Collaborate with cross-functional teams to integrate security measures into all stages of the software development lifecycle.
• Monitor and analyze security systems and networks for potential breaches, responding swiftly to incidents and coordinating remediation efforts.
• Stay up-to-date with the latest security technologies, trends, and threats to proactively protect AUTOTEC's infrastructure.
• Provide expert guidance and mentorship to junior security staff, fostering a culture of security awareness and best practices.
• Engage with external partners and stakeholders to ensure compliance with industry standards and regulatory requirements.
• Develop and deliver security training programs and workshops to enhance the security knowledge of AUTOTEC employees.

Required Education:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. A Master's degree or relevant certifications such as CISSP, CISM, or CEH is preferred.

Required Experience:

• At least 8-10 years of experience in cybersecurity or information security roles, with a significant portion in a senior or lead capacity.
• Proven track record of leading security architecture and engineering projects.
• Experience in designing and implementing security systems and controls in complex enterprise environments.
• Demonstrated experience with security compliance frameworks and standards such as ISO 27001, NIST, and GDPR.
• Experience in incident response and management, including leading investigations and coordinating with cross-functional teams.

Required Skills and Abilities:

• Strong understanding of network protocols, firewalls, VPNs, IDS/IPS, and other security technologies.
• Proficiency in risk assessment, vulnerability management, and penetration testing methodologies.
• Excellent problem-solving skills with the ability to analyze complex security issues and develop innovative solutions.
• Strong leadership and project management skills, with the ability to mentor and guide junior engineers.
• Exceptional communication skills, both written and verbal, with the ability to convey complex security concepts to technical and non-technical stakeholders.
• Ability to stay current with the latest security trends, threats, and technologies, and apply this knowledge to enhance the organization's security posture.