[Remote] Lead Systems Engineer - Threat and Vulnerability Management (Remote)

Note: The job is a remote job and is open to candidates in USA. The ODP Corporation is a leading provider of products and services through an integrated business-to-business distribution platform. The Lead Systems Engineer will oversee the Global Information Security Operations Center and Threat and Vulnerability Management group, ensuring the security and integrity of the computing environment while managing various security tools and leading penetration tests.

Responsibilities

• Manage, implement and monitor a strategic, comprehensive enterprise-wide information security monitoring and operation program to ensure the integrity, confidentiality and availability of information owned, controlled or processed by the organization
• Design, develop and recommend security standards and implement them
• Manage information security activities related to the protection of PCI and PII information. Ensure that Office Depot follows all applicable regulatory and compliance directives and policies regarding securing and monitoring of PCI and other sensitive information
• Provide input into information security budgets and participate in contract negotiations
• Assists with security road map design and vendor selection
• Work directly with the business units to facilitate IT risk analysis and risk management processes, identify acceptable levels of risk, and establish roles and responsibilities regarding information classification and protection. Provide subject matter expertise to executive management on a broad range of information security standards and best practices
• Provide strategic and tactical security guidance for key IT projects, including the evaluation and recommendation of technical controls
• Liaise with the Information Security Architecture & Engineering team and the Information Security Information Assurance team
• Liaise between the information security team and corporate compliance, audit, legal, Security/Safety and HR management teams as required
• Create and facilitate the information security risk assessment process, including reporting and oversight of remediation efforts to address negative findings and management of outside assessors
• Manage security incidents and events to protect corporate IT assets, including intellectual property, fixed assets, and the company's reputation
• Coordinate the use of external resources involved in the information security program, including, but not limited to, interviewing, negotiating contracts and fees, and managing external resources
• Develop business-relevant metrics to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation and increase the maturity of the security program
• Direct the implementation of security technologies including (a) evaluating security products; (b) installing security products and making necessary system changes; (c) developing rollout plans and communications to Office Depot’s staff; and (d) training and coordinating with other IT departments. Supervise dotted line reports including input into performance reviews, goal setting, and hiring activities

Skills

• Bachelor's degree or equivalent experience
• Area of Study: Computer Science, Electrical or Software Engineering, or similar technical field of study
• Minimum Years of Experience: 8 years, with 6-8 years of relevant information security experience
• Type of Experience: Risk Management, Vulnerability Management, Threat Analysis, Security Auditing, Security Monitoring, Red Teaming, Penetration Testing, Incident Response, Project Management, and other Information Security Practices
• Technical Competencies & Information Systems: expertise in generic information security standards and experience in deploying some set of these standards like PCI, SOX, Sans and ISO 27001-27005
• Candidate must have thorough understanding of following technologies/systems: Networking; Firewall (Checkpoint); NIPS, network monitoring (Checkpoint, AirDefense, SNORT); HIDS (Tripwire); VPN (Cisco); Proxy (Bluecoat); Spam appliance (Postini); Server architectures including hardening frameworks; Endpoint firewall, antivirus, patching, and client hardening frameworks; End user authentication (Microsoft Azure), PKI (CAC, Microsoft), Enterprise tools, event management (Qualys, Splunk Enterprise, Microsoft Defender); Application related – SQL injection, cross site, mobile, database, scripting languages, Web (Apache, IIS, Tomcat, WebSphere). Bugcrowd. Email anti-phishing (Proofpoint)
• Excellent written and oral communication skills with the ability to effectively communicate with information technology professionals as well as senior management and auditors, assessors, and inspectors
• Critical thinker with strong problem-solving skills; thorough project management skill set
• Ability to lead and motivate cross-functional, interdisciplinary response teams
• High level of personal integrity, and the ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity
• High degree of initiative, dependability, and ability to work with little supervision

Benefits

• Medical Insurance/Prescription Drugs
• Dental Insurance
• Vision Insurance
• Flu shots
• Mental Health Benefits
• Support Programs
• Employee Assistance Program (EAP)
• Location Events & Activities
• Recognition & Rewards Programs
• Flexible Work Schedules
• Paid Holidays (as applicable by business unit)
• Paid Time Off (Full-Time Associates are eligible to receive up to 128 hours on a prorated basis in their first year of employment)
• Paid Parental Bonding
• Adoption Reimbursement
• Fertility Treatment Discounts
• 401(k) and Roth Savings Plans
• Savings Plan Employer Match
• Commuter Benefits
• FSA/HSA Pre-Tax Benefits
• HSA Employer Match
• Discount Center
• Employee & Dependent Life and Accidental Death & Dismemberment
• Short & Long-Term Disability
• Medicare Concierge Services
• Charitable Giving
• Volunteering & Mentorship

Company Overview