Sr. Security Engineer
Core Scientific
Who We Are
Bold. Unapologetic. Hardworking. We are building something special. Put simply: We power and secure the next global financial system.
At Core Scientific, we host best-in-class enterprise level blockchain hardware in expansive, state-of-the-art data center facilities. Our proprietary software stack automates blockchain mining optimization, pushes machine images and firmware, and monitors all aspects of our operations, ensuring our customers receive the highest possible ROI on their hardware investment.
But what makes us different from others in our industry, apart from our unrivaled white-glove customer service? We invest heavily in growing our own digital asset holdings and pioneering innovative financial products and services to maximize our own, and our customers' portfolios, through blockchain technology.
Come join us as we focus exclusively on the game changing, hypergrowth financial technologies that are already diversifying markets and democratizing access to stores of value. Pioneering an industry isn’t for the faint of heart. We require smart, creative, collaborative minds, who work hard and fast.
Intrigued? Then apply and be a part of something truly revolutionary at Core Scientific.
Title
Sr. Security Engineer
Reports To
Chief Information Security Officer
The Job
We’re looking for an experienced Security Engineer who has a collaborative work style, especially in a highly virtual and cross-functional environment. Be passionate, articulate, and positive. The Engineer should have exceptional attention to detail and the ability to work independently while managing multiple projects and priorities. You should enjoy building great infrastructure to support internal and external facing systems.
Why is this role important to Core Scientific?
This role has an impact that reaches all areas of Core Scientific, Operations to Finance, Technology and Beyond. Joining as a Senior member of the Information Security (InfoSec) team you will be instrumental in ensuring the performance, stability and security of all of Core Scientific. You will traverse Blue & Red Team functions, solving challenges on both sides with code. Daily actions improve observability. You are instrumental in the InfoSec design review process as we vet new tools, services for implementation. You will also work closely across the aisle with the technology team as we ensure software developed in-house meets both our internal standards, as well as compliance obligations.
Responsibilities
- Ability to define, capture, and interpret product/system security requirements
- Drive Compliance (SOX, SOC, CIS, NIST) company-wide.
- Remain on top of current threat landscape.
- Build, integrate, test, monitor and deploy InfoSec code.
- Audit services for compliance.
- Manage, track, and document changes to code
- Further Security as Code initiatives.
- Partner to ensure secure, immutable infrastructure through infrastructure as code.
- Maintain InfoSec’s infrastructure, both on-prem as well as cloud.
- Own Red Team Campaigns, Gamedays and tabletop exercises.
- Drive best practices across InfoSec as well as Core Scientific as a whole.
- Be a thought leader and mentor within the company for junior/mid-level engineers
Qualifications
- 3+ years’ experience in SecDevOps and/or Infrastructure Engineering or equivalent experience as a Full Stack Software Developer, responsible for coding either/both application and infrastructure
- 3+ years of experience working with cloud architecture and services in multiple public clouds (Amazon Web Services, Microsoft Azure, Google Cloud Platform, or IBM Cloud)
- 3+ years of experience in automation of code deployment in both on premise environments and multiple cloud providers
- 3+ years’ experience with software configuration management systems
- 3+ years’ experience with virtualization and containerization architecture (Kubernetes)
- Experience with build and release Management – GitHub, Apache, Make, Jenkins
- Strong understanding of modern engineering practices including Scrum and Kanban
- Basic networking knowledge: TCP/UDP, DHCP, DNS, routing and HTTP and systems architecture, including Unix, Linux (BSD, Arch, Ubuntu, Gentoo, Kali, parrot, etc.), OpenVMS, FlashCopy, HP/UX, Tru64
- Deep understanding of agile and lean principles with demonstrable success in leading enterprise-level IT process re-engineering and transformational projects using a client focused consultative approach
- Strong scripting skills (Python, Perl, Bash, Ansible, BASH, Terraform)
- Understanding of Active Directory, Windows group policies, and Linux integration with Active Directory
- Strong analytical and troubleshooting skills
- Excellent communication and interpersonal skills
Work Environment
This job operates in a remote office and generally uses laptop computers and smartphones.
Physical Demands
While performing the duties of this job, the employee is frequently required to sit; stand; walk; use hands; and lift up to 10 pounds.
Position Type/ Expected Hours of Work
This is a full-time, Monday – Friday position. You may be expected to work some weekends and after hours as work requires.
Travel
Minimal travel may be required.