Security Engineer - Gurobi Optimization

At Gurobi Optimization, we empower our customers to expand their use of mathematical optimization technology in order to make smarter decisions and solve some of the world's toughest and most impactful business problems. We're looking for passionate, dedicated, and innovative game-changers to join our team.

As a Security Engineer, you will offer direct security support for both infrastructure and end-user systems and services. Our workplace primarily uses macOS endpoints, and our infrastructure includes cloud environments (AWS, Azure, GCP) and a Colo datacenter. Our team members are spread out across 16 countries, bringing complex and rewarding security challenges.

What You Will Be Doing

AI Governance

• Monitor developments in artificial intelligence and cybersecurity to identify emerging risks and opportunities for improving security controls.
• Utilize CrowdStrike and related security platforms to collaboratively identify, monitor, and mitigate risks associated with the use of AI applications and services.
• Audit and update the configuration of AI platforms to adapt to evolving data leakage and similar threats.

Infrastructure & Cloud Security (AWS / Colo)

• Manage configuration and updates to critical security systems such as firewalls and network devices.
• Manage certificate deployment, renewal, and configuration through Infrastructure as Code (IaC).

Office 365

• Suggest, review, and implement highly secure configuration standards.
• Enhance and oversee phishing/virus detection and incident response measures.
• Assess and deploy features to enhance security for end-user accounts and services.

Vendor Security & Audits

• Assist with security assessments requested by customers interested in Gurobi products.
• Assess requests for new third-party applications, ensuring vendor compliance with security standards.
• Review audit findings, collaborate on necessary remediations, and assist in upcoming certification efforts.

Vulnerability Management

• Conduct port scanning and perimeter scanning to identify vulnerabilities.
• Assist with patch reporting and enforcement for laptops, servers, and virtual machines.

Identity & Endpoint Security Management

• Consolidate services and applications under Multi-Factor Authentication (MFA) and Single Sign-On (SSO) solutions.
• Maintain standards for Mac and Windows laptops used globally.
• Update and enforce acceptable use policies.
• Develop Mobile Device Management (MDM) policies and processes.

Qualifications & Requirements

• Degree in cybersecurity, computer science, information technology, or a related field (or equivalent relevant professional experience).
• 5+ years of hands-on experience in security engineering, security administration, infrastructure security, or a closely related role.
• Active participation in the cybersecurity community through professional organizations, conferences, training, certifications, research, or knowledge sharing.
• Thorough understanding and expertise in computer systems, networks, cloud technologies, applications, and security systems.
• Experience managing security systems in CrowdStrike and Microsoft Purview.
• Proficiency in cloud infrastructure, Linux, virtualization technologies, and infrastructure automation.
• Experience with LDAP, Docker, Git, JumpCloud, and Microsoft 365.
• Robust analytical, critical thinking, and problem-solving abilities.
• Excellent interpersonal, presentation, and communication skills.
• Demonstrated capability to operate effectively across global time zones within a 100% remote work environment.