1.jpg)
Job Responsibilities: Cybersecurity Engineering
Salary: $20-30/Hour
Company: Costco
Location: San Diego, USA
Educational Requirements: Bachelor's Degree
That is an surrounding unlike whatever in the high-tech world and the secret of Costco’s achievement is its lifestyle. The value Costco puts on its employees is properly documented in articles from an expansion of publishers consisting of Bloomberg and Forbes. Our employees and our individuals come FIRST. Costco is widely known for its generosity and network service and has won many awards for its philanthropy. The business enterprise joins with its personnel to take an active position in volunteering by sponsoring many opportunities to help others. In 2021, Costco contributed over $58 million to agencies together with United manner and children's Miracle community Hospitals.
Costco it is answerable for the technical future of Costco Wholesale, the 0.33 biggest retailer inside the world with wholesale operations in fourteen nations. Regardless of our length and explosive international enlargement, we maintain to offer a own family, worker centric environment wherein our employees thrive and be triumphant. As proof, Costco ranks seventh in Forbes “world’s first-rate Employers”.
The role of each Cybersecurity group member is to help the overarching values and enterprise goals of Costco Wholesale as they relate to meeting felony, moral, and regulatory responsibilities; shielding individuals’ and employees’ privacy; and keeping a security era environment for our operations. The Endpoint security Engineer provides consultative offerings; works with providers for product attention and recommendation; plays integration, monitoring, and auditing of information gadget activities; advises on subjects related to regulations, standards, and approaches; and mentors group contributors.
If you need to be a part of one of the international first-rate agencies “to paintings for”, actually practice and let your career be reimagined.
Function
- Takes evaluation of existing Cybersecurity Infrastructure systems and equipment.
- Advises on roadmap for consolidation and integration of Cybersecurity platforms.
- Mentors and develops crew participants.
- Evaluates and hardens tooling and instrumentation to save you cyber exploits.
- Performs and/or coordinates ordinary safety tests of current or new infrastructure.
- Performs duties vital to help in organising practices and machine configurations to make sure the safety of information structures belongings and to protect facts systems from intentional or inadvertent get entry to or destruction.
- Works with facts systems custodians (i.E., department managers, consumer community, and systems administrators) at special tiers within the enterprise to apprehend their respective safety wishes; and assists with imposing practices and strategies steady with Costco’s records security coverage.
- Assists with monitoring and auditing of facts systems activities and systems to confirm data safety coverage compliance; and offers control with safety coverage compliance checks and machine monitoring reviews.
- Works with stakeholders to provide safety answers that support their commercial enterprise necessities.
- Identifies, develops, and implements mechanisms to detect security incidents in order to decorate compliance with and assist of safety requirements and tactics in area.
- Conducts safety hazard checks on new merchandise and structures, periodic protection risk checks on present structures, and identifies and/or recommends suitable security countermeasures and exceptional practices.
- Coordinates sports or engagements with loss prevention; interacts with legal and law enforcement as required.
- Identifies protection gaps that divulge Costco to capacity make the most and develops brief and long time prioritized remediations to cope with those gaps ensuring control is apprised of the risk in a well timed way.
REQUIRED
- Excessive diploma of ethics/confidentiality.
- Enjoy with endpoint safety technology, excellent practices, and workflow.
- Palms on work with organization device management technologies together with institution coverage or sccm.
- Sturdy prioritization and investigative talents.
- High level of know-how of av, edr, fim, ids, vuln scanning, logging/monitoring, and other commonly implemented company security technologies are a need to.
- Capacity to paintings successfully, impartial of assistance or supervision.
- Revolutionary, creative, and extraordinarily responsive, with a robust feel of urgency.
- Willing to percentage understanding and help others in understanding technical and business topics.
- Operating know-how of information structures protection requirements and practices (e.g., get admission to manipulate and gadget hardening, machine audit and log record tracking, safety guidelines, and incident handling).
- Validated enjoy of “hands on” protection expertise of one or more of the subsequent systems: windows or unix.
- Capacity to virtually speak records protection subjects to executives, auditors, quit users, and engineers, using suitable language, examples, and tone.
- Experience with dns, ntp, smtp, and different commonly used foundational protocols.
- Operating expertise of protocols and technologies together with tcp, udp, ssl, ftp, netbios, and dhcp.
- Enjoy imposing controls for numerous cybersecurity and regulatory frameworks along with nist, pci, sox, or hipaa.
- Capability to interpret facts protection data and strategies to identify potential compliance issues.
- Capacity to speedy apprehend security systems so as to identify and validate safety requirements.
- Scheduling flexibility to fulfill the wishes of the commercial enterprise; may additionally encompass evenings, weekends, and vacations.
Recommended
- Bachelor’s degree in pc technology or at least 8 years’ of information structures security experience.
- One or extra professional safety certifications which includes CISA or CISSP (or equivalent).
- Enjoy scripting/programming languages (powershell, shell scripting, python, and many others.) A plus.
- Enjoy integrating disparate structures the use of apis is a plus.
- Accurate operating expertise of Kerberos, SAML, OAUTH, and other authentication mechanisms are helpful.
