Security Engineer - IT Risk Management

Job Description
Job Title:Security Engineer - IT Risk Management
Job ID:316577
Location: Plano, Texas

Requirements - Corp/Field Mgmt
We are seeking a security engineer to join JCPenney as a technical leader and mentor in the IT Risk Management team focused on driving changes within the organization that increase the security posture of JCPenney. As a technical expert, you will provide leadership through roadmap definition, execution of security initiatives, and being an advocate for secure practices across the organization. Your role will be to analyze gaps within the security environment and provide technology, process, and training solutions to remediate those gaps.

Responsibilities include:
Combine industry and technical expertise to lead and develop innovative integration solutions
Define and document secure design and ensure alignment with enterprise standards
Provide leadership for best practices in vulnerability management and penetration testing
Evaluate, configure and manage security tools and processes
Familiarity with compliance and regulatory rules including PCI, and SOX
Ability to correlate security data from thousands of data points and translate it into actionable items that can be easily communicated to stakeholders
Effectively communicate with team members, business users and legal

Core Competencies & Accomplishments:
High proficiency in a vulnerability management tool such as Nessus, Qualys or Rapid7
Broad technical expertise including application development (Java, Python, .NET), and infrastructure support (both system and network)
Familiarity with network security tools (IPS, Firewall), SEIM technologies and correlation, and application security practices (static code analysis, web security testing)
Experience executing application and infrastructure level pen testing
Mobile security testing a plus
Highly motivated, with a desire to learn new technologies and methodologies
Demonstrated ability to identify creative/innovative solutions to problems
CISSP a plus