Advance Auto Parts is looking for a Security Engineer III to join our team in Roanoke, VA. This individual will join an established team of talented individuals dedicated to ensuring the security of information systems assets and to protect systems from intentional or inadvertent access or destruction. This position is ideal for the intrinsically curious individual who likes to challenge themselves in the security space. Advance Auto Parts offers the facilities to research while enjoying support from the senior leadership and board levels. If you ve been looking for an opportunity to work for a targeted Fortune 300 company this could be the perfect position for you!
ESSENTIAL DUTIES AND RESPONSIBILITIES include the following. Other duties may be assigned.
- Conduct security reviews with available tools to assess the security posture of applications and the hosting computer systems
- Execute ongoing audit reviews in assigned technical discipline in support of our compliance goals and facilitate periodic audits as scheduled for regulatory compliance
- Facilitation of remediation/mitigation efforts through peer teams as identified by internal reviews and 3rd party assessments with tracking to closure
- Serve as a technical subject matter expert to assist peer teams in understanding identified security risks and consulting on best practices for remediation
- Build and maintain a knowledge base of security attack vectors and common system vulnerabilities for the purposes of applying defensive controls and the development of security hardening standards
- Develop a broader understanding of additional core technology areas in either operating systems, application development, network security or enterprise middleware products
- Serve as a key team member in incident response engagements as assigned by the incident handler
- Provide thought leadership in improving our assessment processes and the security posture of AAP systems
- Engage in effective coaching and provide technical direction to help develop and mentor more junior members of the InfoSec team
QUALIFICATIONS
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
- Deep understanding of a two or more technologies including operating systems, application development, network security and enterprise middleware products
- Deep and broad knowledge of information security tools, concepts, and techniques
- Work well as part of a team of technical specialists
- Solid technical security foundation with the ability to learn new security skills and concepts quickly
- Solid analytical skills to identify problem areas and opportunities for remediation
- Excellent verbal/written communication skills and excellent interpersonal skills
- Confidence and ability to project an authoritative presence
- Demonstrated ability to manage multiple priorities
EDUCATION and/or EXPERIENCE
- Bachelor s degree in Computer Science, Cybersecurity, or equivalent experience and knowledge in a related field of study
- 7-10 years of experience in Information Security; or equivalent combination of education and experience.
CERTIFICATES, LICENSES, REGISTRATIONS
- Security (preferred)
- Certification in one or more relevant platform systems (e.g. Cisco, Microsoft, VMWare, Linux, Unix, web development, storage technologies)
- CISSP or GISP desired
- One or more SANS GIAC certifications preferred