Enterprise Security Engineer - Fedramp

Rubrik Rubrik · Enterprise · United States · Remote · Information Security

Enterprise Security Engineer focused on ensuring Rubrik's Corporate Enterprise IT technologies meet high security standards, including partnering with teams to improve security posture, managing security policies, analyzing and hardening applications and infrastructure, and supporting threat operations. The role also involves deploying and securing AI technologies and leveraging AI tools for team efficiency.

What you'd actually do

  1. Design and implement security standards across Identity (Okta), Endpoint (Windows, MacOS, Linux), Secrets Management (Vault, Lastpass) and Business Applications (Salesforce, Glean, etc).
  2. Partner with IT and other organizations to improve the security posture of enterprise applications, integrations, and access to sensitive and business data.
  3. Actively participate in evaluation, development, and management of security and compliance policies within IT management systems such as JAMF, inTune, etc.
  4. Analyze and harden existing applications, infrastructure, automation, and deployment processes: CircleCI, Github workflows, Tines, Zapier, etc.
  5. Work with Corp IT teams, operations, governance, and other stakeholders to draft security standards and implement monitoring, alerting, and governance.

Skills

Required

  • 6+ years experience in enterprise security, with hands on experience in administration and design across Windows, Mac, Okta and public cloud infrastructure
  • Broad knowledge of enterprise attack vectors and exploits in both end-user and IT Apps
  • Subject matter expertise in business applications, endpoint and Identity management
  • Deep understanding of endpoint systems, corporate networking including wi-fi and IT application systems (Salesforce, Mulesoft, Lastpass, etc)
  • Programming experience in PowerShell, Python, Go or Java
  • Experience with deploying and securing Enterprise applications and environments at scale
  • Security and administrative expertise in at least one major public cloud provider (AWS, GCP, Azure)
  • Understanding of corporate security maturity model frameworks and how to apply them
  • Strong written and verbal communication skills
  • Knowledge of regulatory guidelines and standards such as SOC2, ISO 27001, FedRAMP, etc.

Nice to have

  • Leverage AI tools and agents to improve team performance, enterprise security capabilities, and team efficiency

What the JD emphasized

  • FedRAMP
  • regulatory guidelines and standards such as SOC2, ISO 27001, FedRAMP, etc.
  • Security and Privacy Responsibilities for protecting the U.S. Federal Government’s interests