Lead Information Security Engineer
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.1
Reclaim your time by letting our AI handle the grunt work of job searching.
We continuously scan millions of openings to find your top matches.
Job Description
Appian's information security team is growing and is seeking a Lead Information Security Engineer to help design, build, and support security architecture components for securing Appian's Cloud and Corporate environments. This person will work as a lead expert in a dynamic information security team involving cloud computing technologies and multiple security frameworks.
This role is based at our Headquarters in McLean, Virginia. Appian was built on a culture of in-person collaboration, which we believe is a key driver of our mission to be the best. Employees hired for this position are expected to be in the office 5 days a week to foster that culture and ensure we continue to thrive through shared ideas and teamwork. We believe being in the office provides more opportunities to come together and celebrate working with the exceptional people across Appian.
About the Job:
Work directly with technical teams (e.g. Engineering, Cloud, IT) to conduct secure architecture reviews and to design, analyze, and/or recommend secure infrastructure and tooling
Lead major projects/initiatives that involve large security tool deployments or engineering efforts
Serve as a trusted advisor and expert in security engineering domains to other teams and peers with their use of cloud computing and/or modern technologies
Enhance our security engineering infrastructure and systems that are continuously evaluating the threat-landscape for Appian's operations and service offerings
Serve as a mentor to other engineers on the security team
Contribute ideas to improve the security posture and detections in our security program
Stay knowledgeable around the cutting edge of information security, threats, tools, and techniques
About You:
4+ years experience with security architecture and design
5+ years experience using various security technologies
3+ years experience in SaaS, PaaS, IaaS and/or cloud infrastructure development environments (experience with Amazon Web Services is a plus)
Experience with modern Cloud Native technologies- Kubernetes, Docker, serverless, etc.
Experience with infrastructure-as-code, security tool development, and automation to secure the cloud with a preference for leveraging/creating open-source security tools
Experience with languages such as Java, Python, Ruby, Go, C, etc.
Experience with UNIX or its variants, such as Linux
Familiar with networking protocols and technologies- TCP/IP, DNS, SMTP, etc.
Familiar with common security frameworks such as the Mitre ATT&CK framework and threat hunting concepts to identify IOCs
Effective communicator of technical designs and vision verbally, visually and/or in writing for small to medium sized technical and non-technical audiences
Excellent at problem solving and a talent for identifying creative solutions