M+E Technology Job Board

Senior Security Engineer

  • Full Time
  • Atlanta, GA
  • Applications have closed

Pandora

At Pandora, we’re a unique collection of engineers, musicians, designers, marketers, and world-class sellers with a common goal: to enrich lives by delivering effortless personalized music enjoyment and discovery. People—the listeners, the artists, and our employees—are at the center of our mission and everything we do. Actually, employees at Pandora are a lot like the service itself: bright, eclectic, and innovative.

Collaboration is the foundation of our workforce, and we’re looking for smart individuals who are self-motivated and passionate to join us. Be a part of the engine that creates the soundtrack to life. Discover your future at Pandora!We’re looking for a senior level engineer driven to ensure and maintain the security of Pandora’s network, IS/IT and security devices. This person will identify trends in adversary attacks and techniques in malware, hacker methodologies and tactics, system vulnerability and key indicators of potential system exploits.

In this role, you will not be siloed into doing one thing – but rather have the opportunity to work on a variety of complex hack and defend related security projects based on your skill set and interests. Also, if you have forgotten what it feels like to have work-life balance, then this opportunity may help you reclaim your life. Plus, this role will be fun, as the team is super cool and Pandora has huge volumes of data and our infrastructure is almost entirely on premise (yeah, we own data centers, networks etc).
Responsibilities:

Daily monitoring analysis; SIEM design, operation
Perform Detailed Forensics for Security-Related incidents
Work with Networking, Systems and Enterprise IT/IS teams to specify proactive and responsive mitigations
Develop, evolve, and manage monitoring and alerting for Pandora environments to create a deep understanding of trends, anomalies and incidents
Maintain an expert level understanding of attacks, vectors and emergent threats (including Botnets, Professional Hacking, Exploits, Hacktivism and Nation State Actors)
Act as a participant in Architecture and Planning for security efforts
Work with Compliance and Policy teams to make sure operational efforts are in line with Compliance (SOX/PCI) and Policy Standards

Requirements:

Experience operating in public cloud infrastructure
Mastery of one or more programming language (Python, Go, Javascript/Node, Java)
Experience detecting and mitigating attacks on public-facing websites
SIEM design, scaling, operations
Experiencing advocating for Security BCP in production and corporate IT environment
BA/BS or better in Computer/Information Science or a related field

Desired:

Experience protecting High-volume Consumer websites
5+ years Linux/Unix/Windows or Network administration
Expertise in text processing and regular expressions
Strong knowledge of Enterprise Security (AD, LDAP, SAML, SAAS/Cloud monitoring)
Deep understanding of Cryptographic Technology