Do you want to help eliminate barriers between ideas and business outcomes? We want you to bring your unique experiences and creative ideas to the table. CA Technologies provides software and solutions that help our customers to develop, manage, and secure complex IT environments to increase productivity and enhance competitiveness in their businesses. It’s our aim to encourage global collaboration and results-oriented innovation, while supporting and developing our talented people and our communities. CA Technologies will empower you to drive authentic success, for both the business and yourself in the application economy.

CA Veracode is seeking a highly-motivated, detail-oriented individual to join our Information Security team. As a leader in the Application Security community, our customers rely on us to deliver a world-class platform in a highly secure fashion. In this role, you will have the opportunity to help make our infrastructure, products, and customers more secure. The role of Information Security Engineer will include the following responsibilities:

Responsibilities:

• Participate in response activity to security incidents as a member of the Incident Response Team.  Expected to eventually grow into leading these efforts for team.
• Perform log analysis for detecting intrusions and attacks conducted against cloud components through Splunk instances and other security monitoring software.
• After triaging security incidents, utilizing security event management tools to track incidents and follow up with needed personnel to ensure remediation of all incidents.
• Conduct web application security testing of web-based cloud components and validate the issues accordingly.
• Help drive adoption of security tools and best practices specifically within cloud infrastructure.
• Provide defensive recommendations on new threats to global systems, applications, and technologies.

Required Experience/Skills:

• BS (or MS) in Computer Science, Engineering, Information Security or related degree.
• Minimum of 2 years of experience in information security or a mixture of related technical fields.
• Solid background in Information Security concepts.
• Comfortable using Splunk for security incident/event identification AND vulnerability management tools like Nexpose or other similar solutions (Nessus, Metasploit, etc.).
• Familiarity with either FedRAMP or other regulations/frameworks: NIST, PCI, PII, ISO 27001, etc.
• Experience with LAN/WAN networking and security infrastructure (Firewalls, IDS/IPS, and VPNs).  System hardening and incident response tools.

Desired Experience/Skills:

• 1 year or more of experience with Cloud platforms such as Amazon Web Services (AWS).
• Any experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes (secure software development (Application Security), data protection, cryptography, key management, identity and access management (IAM), network security) within IaaS, PaaS, SaaS, and other cloud environments.
• Knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms.
• Experience with deployment orchestration, automation, and security configuration management.
• Familiarity with Cloud Management tools such as Dome9 and Threatstack.
• Recognized security certifications are highly desirable (CISSP, CISA, GIAC, CEH and others).
• Exposure to FedRAMP and NIST 800-53 control implementation.

vcode

More About Working at CA:

CA has earned scores of Workplace Excellence awards in the last few years – and there’s a reason for that. Here you’ll have the opportunity to eliminate barriers for our customers and earn a competitive compensation and total rewards package – all while pushing the boundaries of what’s possible by collaborating with a diverse team of global innovators. In short, CA’s fun, diverse, and fast-paced culture has put us on the map as one of the best employers in Information Technology.

We offer competitive salary, company-sponsored premium Medical/Prescription & Dental Plans, company-paid Holidays, Vacation, Anniversary Service and Sick Days, 401(k) Plan, Education/Training Reimbursement, Charitable Gift Program, Adoption Assistance Program.