Security Engineer II

Coinstar is hiring a Security Engineer II to design, implement, and maintain security solutions across email, network, endpoint, and vulnerability management. The role also supports identity and data protection services, threat hunting, security monitoring, and incident response.

Responsibilities:

• Coinstar’s Security Engineer II is responsible for the design, implementation and maintenance of security solutions to include email security, network security including firewall management, endpoint protection, and vulnerability management. Additional responsibilities in identity management, data protection management and threat hunting will be a shared set of responsibilities with other team members
• Design, configure and support firewalls, virtual private networks, intrusion detection/protection systems, and zero-trust architecture
• Analyze real-time network traffic, investigate security alerts, and perform incident management activities in partnership with Coinstar’s managed defense partner
• Conduct recurring security audits, risk assessments, and penetration testing to address vulnerabilities as a part of the larger Coinstar vulnerability program
• Enforce security policies and maintain compliance using SOC 2 Type II requirements as the framework
• Oversee Coinstar’s email security controls and respond to potential phishing scenarios as well as help conduct phishing tests
• Manage ongoing endpoint protection services including patching and incident response when required inclusive of mobile device management
• Spearhead addressing vulnerabilities across all applicable layers using severity and impact to prioritize response
• Expand monitoring and alerting where applicable using Coinstar’s observability solutions
• Participate in technical design reviews and security assessments during project execution
• Respond to third party risk assessment questionnaires
• Perform off hour support activities when required
• Work with team members in support of evolving Coinstar identity services and data protection services

Requirements:

• Bachelor's degree in Computer Science, Engineering or related field required
• 3+ years of experience with hands on security engineering responsibilities
• 2+ years of Microsoft Azure native security and network experience
• Knowledge of PowerShell and Python 3
• Hands on knowledge of system security, with focus on Linux, Windows, and Network Devices
• Knowledge of Terraform or similar infrastructure as code (IaC)
• Solid understanding of modern security controls and APT defenses
• Knowledge of feeding applicable logs to SIEM for event management
• Knowledge of investigating SIEM alerts to ascertain needed response
• Knowledge of methods for modern threat hunting
• Ability to assess and configure network traffic for route optimization, security concerns and packet loss
• advanced degree preferred
• GSEC certificate preferred
• Microsoft certificates such as AZ-500 and/or SC-900 desired
• Experience with Okta enterprise authentication desired
• Experience with Auth0 consumer authentication desired
• Experience in SOC2 Type II controls and associated audits a plus