Senior Attack Surface Cloud Security Engineer

 

What this job involves:

Essential Duties & Responsibilities:

Provide strategic direction for the Enterprise Security Strategy at JLL by educating self and others in new security threats across the entire spectrum of JLL applicable technologies.

Provide strong technical leadership in all aspects of security including end point protection, network security, firewalls, application, and cloud security.

Demonstrated ability to make decisions in lieu of incomplete information and rationalize/socialize the decision to a set of global stakeholders.

Provide guidance, governance, and oversight of multiple security efforts in parallel. The ability to handle a large number of parallel initiatives is a key strength.

Act as the technical bridge between solution architects and business / IT leadership by messaging appropriately.

Anticipates internal and/or external business challenges and/or regulatory issues; recommends process, product or service improvements

Develop and maintain current and planned state architectural documents Domain roadmaps, Standards, Patterns, reference

architecture/implementation documents

Work closely with the other EA domains like Applications, Infrastructure, Cloud as well as with the business to identify, recommend, develop, and support cost-effective security technologies and controls.

Analyze and communicate benefits and risks associated with IT investments and participates in Regional IT governance and decision making, adhering to standards.

Ensure applications, processes, and procedures of the Enterprise Application team comply with JLL standards including security policies, change management, SOC2 and other critical business requirements

Perform architecture design with senior technical staff and product technical leads to design new products or enhancements

Set technical architecture roadmap for all security stack technologies and defines technical standards for the team.

Help to technically evaluate and implement 3rd party solutions. This includes 3rd party applications along with development tools and libraries.

Provide initial analysis and recommendations for new capabilities / solution requests from businesses on possible target platforms as well as available applications. 

Required Knowledge, Skills, and Abilities

Have demonstrated expertise of security threat vectors, industry standard controls and corresponding technologies

Solid understanding of networks and network security including Firewalls, VPNs, B2B controls

Solid understanding and current knowledge of evolving security threat landscape and industry best practices in implementing required controls and appropriate technologies.

Excellent knowledge of the best available tools, software, applications, and systems that support application security.

Experience

8+ years of experience in technology, including 5+ years as enterprise security architect

Breath of expertise in security technologies and architectural best practices

Excellent written and verbal communication skills along with problem solving skills, leadership and a willingness to collaborate and drive change

Ability to influence peers and senior leadership (IT and Business) and a strong ability to lead teams through change management.

Preferred

Experience with claims authentication architecture and providers (Okta, PingFederate, ADFS), load balancer and firewall concepts, certificate and key management concepts, networking infrastructure, Microsoft Azure PaaS and IaaS is preferred.