Senior Product Security Engineer at Red Hat focusing on security and compliance for digital sovereign products while collaborating across global teams and enhancing automation.
About the role
- Cybersecurity IAM Engineer focusing on designing, implementing, and maintaining PAM solutions at BD. Key responsibilities include managing privileged accounts and mitigating security risks.
Responsibilities
- Collaborates with IAM Architects and Operations staff to implement and support comprehensive PAM technical solutions.
- Collaborates with collaborators across the organization to identify and vault privileged accounts across all enterprise platforms.
- Implements and supports advanced PAM capabilities such as password autorotation, session monitoring and recording, just in time access, etc.
- Facilitates PAM support by crafting docs, SOPs, training Ops team, mentoring junior IAM members.
- Proactively researches relevant technologies, solutions, and system new features.
- Shares findings and recommendations with architects, leaders, and multi-functional teams and helps drive implementation.
- Ensures IAM solutions adhere to regulatory, compliance, and internal requirements.
- Assist in the maintenance of IAM policies, standards, and procedures.
- Assist Compliance in completing audit tasks and remediation efforts.
- Ensures IAM security is aligned with BD overall security and contribute to the continuous improvement of our IAM security strategy based on risk prioritization and business objectives.
Requirements
- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or at least five years’ experience in a related field.
- Minimum of 8 years of experience in cybersecurity, with a focus on Identity and Access Management specifically in Privileged Access Management (PAM).
- In depth hands on experience with implementing PAM solutions, strengthening controls and demonstrating effectiveness.
- Strong understanding of infrastructure such as AD, Entra, AWS, GCP, Unix.
- Working knowledge of common IAM solutions such as IGA, Authentication, MFA.
- Familiarity with regulatory standards such as SOX, HIPAA, GDPR, and ISO.
- Certifications like CISSP, CISA, CISM, CCNA/CCNP, CEH or CompTIA CYSA+.
Benefits
- Health insurance
- 401(k) matching
- Flexible work hours
- Paid time off
- Professional development opportunities
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Security Engineer safeguarding K - 12 student data in several locations for EduTech startup. Designing secure software systems and ensuring data protection to comply with privacy standards.
Security Engineer focusing on data protection and privacy for Kira Learning's educational technology. Safeguarding K - 12 student data while collaborating with engineering teams on secure software development.
Senior Cybersecurity Engineer responsible for protecting Advansys and its clients' IT infrastructure. Designing, implementing, and managing security solutions, while mentoring junior engineers.
Security Engineer responsible for incident response and security protocol design at Sinch. Joining a global team to safeguard sensitive information and enhance cybersecurity measures.
Content Developer creating engaging and effective learning materials for coding education online. Collaborating with a team to develop tailored resources for K - 12 learners in Egypt.
Campus Security Officer ensuring safety at Bright Horizons early childcare centers in Seattle. Responsible for access control, surveillance, and emergency response.
Sounding and Security Watch responsible for Navy asset security at NSF Diego Garcia. Conducting checks and ensuring safety during designated watch hours with strong situational awareness.
Sales Enablement Manager creating technical content for Upwind Security. Collaborating across teams to translate cloud security concepts into clear narratives for engineers and security leaders.
Security Engineer designing and implementing security measures to protect Snap Inc.'s infrastructure. Collaborating across teams while focusing on threat detection and response strategies.