**WHAT YOU'LL DO**:
Welcome to BCG Worldwide IT! We are seeking an IT Data Security Engineer to join our growing Information Protection team.
You will be working in a Security Engineering, Architecture and Operations capacity to drive and support the continued evolution of our Secure Infrastructure Portfolio, notably in Data Security services providing security telemetry and observability telemetry capabilities to help detect and prevent threats. You will play a key role in developing and implementing our next generation of detection capabilities.
You will:- Support vendor assessments, including proof of concepts and research into new security technologies- Continuously improve security & observability telemetry services based on input from a diverse network of internal and external stakeholders, and technology teams as well as the IT industry at large- Create and maintain technical service roadmaps pertaining to monitoring and analysis solutions- Data Management: Define and manage data models, schemas, metadata, and security rules. Design, create, deploy, and manage databases and data structures on premise and in the cloud to fulfill business requirements.- Threat Analysis: Identify and mitigate potential security risks in the organization's data architecture.- Compliance: Ensure compliance with data privacy laws and regulations.- Risk Management: Conduct risk assessments and take appropriate actions to mitigate the risks associated with data security.- Incident Response: Respond to security incidents, conduct investigations, and implement solutions to prevent similar incidents in the future.- Training and Development: Train and educate stakeholders about our data- Collaboration: Collaborate with other IT team members, stakeholders, and executives to ensure the security of data architectures.
**YOU'RE GOOD AT**:
- Verbal and written communication skills in English is required; command of additional languages will be considered a plus
- Successfully interfacing and connect with skilled technologists and non-technical stakeholders
- Working in an Agile environment leveraging strong work management, organizational and planning skills
- Acting as a mentor and lead to other engineers and architects, as part of a geographically dispersed team
- Negotiating and consensus building between stakeholders where competing priorities exist, providing well-honed influencing skills
- Effectively handling difficult and stressful situations with poise, tact and patience, while demonstrating a sense of urgency.
**YOU BRING (EXPERIENCE & QUALIFICATIONS)**:
- Minimum 8+ years of systems and/or security engineering experience with large scale implementations distributed globally
- Extensive knowledge of a globally distributed environment across multiple platforms such as AWS, Azure and GCP
- Experience with standard monitoring frameworks and observability products
- Experience with hybrid environment data sources, data collectors and instrumentation
- Expertise in the use SEIM solutions for basic and advanced detection methods, including cloud-based data sources.
- Experience with security monitoring & observability solutions such as Splunk, Sumo, Datadog, New Relic, AppDynamics
- Experience of working with cloud and data security in a DevSecOps and agile working environment
- Desirable
- Expertise in at least one scripting language (PowerShell, Python, Bash)
- Experience in container/container orchestration technologies - Docker and Kubernetes
- Experience w/systems configuration orchestration tools - Ansible or Terraform
- Understanding of infrastructure as a code and concepts
- Related security certifications (e.g. CISSP, CCSP, SABSA, ITIL etc.).
- Familiarity and experience with the Splunk SPL query language.
- 3+ years familiarity and experience with Linux / Ubuntu / Mac systems
- Experience in creating dashboards, queries, alerts in Splunk, Data Dog, Sumo
**YOU'LL WORK WITH**:
You will be part of a global team located across Europe, Asia, and the Americas, working in a highly collaborative environment with like-minded colleagues.