Applications Engineer Applications Engineer …

Applications Engineer Cloud & Application Security Engineer Charlotte, NC, United States/en-US/Barings/job/Charlotte--NC-United-States/Cloud---AppSec-Security-Engineer_JR_002436/apply

At Barings, we are as invested in our associates as we are in our clients. We recognize those who work diligently for us and reward them for personal and professional integrity, communication skills, distinct competencies and expertise in specific strategies, ability to collaborate as a team member and true dedication to the interests of our clients.

We thank you for your interest in joining the Barings team, and invite you to explore our current employment opportunities.

Title: Cloud & AppSec Security Engineer

Location: Charlotte, NC or London, UK

Barings is a $354+ billion* global financial services firm dedicated to meeting the evolving investment and capital needs of our clients and customers. Through active asset management and direct origination, we provide innovative solutions and access to differentiated opportunities across public and private capital markets. A subsidiary of MassMutual, Barings maintains a strong global presence with business and investment professionals located across North America, Europe and Asia Pacific.

*as of September 30, 2020

Job Summary

Barings is seeking a Cloud (Azure focused) & AppSec Security Engineer to join its Information Security Architecture, Engineering & Platforms team as part of its ongoing global Digital Transformation. The mission of this role is to operate as a subject matter expert within the security function.

Primary Responsibilities

Enable and enhance secure cloud configuration and DevSecOps practices through collaboration with the Application Development, Enterprise Architecture & IT Operations functions and by helping to provide secure design patterns with a "hands on" security engineering mindset.

• Serve as a subject matter expert for cloud and application security engineering solutions
• Support the definition and implementation of security requirements bi-directionally advising the Cyber GRC function on appropriate standards for monitoring.
• Deliver security automation in the CI/CD pipeline via process automation and tooling; reducing security vulnerabilities and configuration weaknesses through standardization and deep monitoring.
• Collaborate with globally diverse teams to continuously improve cloud and application security controls to enable security by design and defense-in-depth principles
• Project Lead for all cloud & AppSec information security projects
• Stay current with evolving technologies and effectively educate teams on security issues and opportunities in cloud and application security domains.
• Ensure alignment of services to information security policies, standards, and frameworks/best practices (SOC, NIST, CISA, ISO, OWASP)
• Demonstrate a commitment to lifelong learning
• Fulfill additional, relevant, tasks appropriate to the role and business demands
• Self-motivated and the ability to work independently

Minimum Experience

• Securing MS Azure based cloud infrastructure
• Azure IaaS, PaaS and SaaS services
• Azure automation with PowerShell & ARM, preferably using Terraform
• Azure network security capabilities - ASG / NSG, Azure Firewall & WAF
• Azure Active Directory, PIM & RBAC; Azure Key Vault
• Azure DevOps & Git source control
• OWASP security & vulnerability management
• Container security Docker\Kubernetes\AKS (ability to explain what Kubernetes is, a plus)

Desired Experience

• Experience in Python
• Experience with Kubernetes
• Palo Alto security solutions
• Agile planning

Qualifications

• Aptitude, experience and\or ability more important than formal qualifications.
• BA and/or MSC in Information Systems, Cybersecurity, Information Assurance (IT related).
• 5+ years of technical and hands on experience in cloud, app development or security roles that have exposed you to the required areas and concepts of the position.
• Strong problem solving, analytical and platform management skills; thinking outside the box.
• Excellent verbal and written communication skills and the ability to interact professionally with a diverse group including; executives, managers, IT personnel, and other subject matter experts.

Certifications (One or more of the following certifications should be current and up to date)

• Relevant security certifications (Cloud-CCSK, AWS, Azure)

Barings is an Equal Employment Opportunity employer; Minority/Female/Age/Sexual Orientation/Gender Identity/Individual with Disability/Protected Veteran. We welcome all persons to apply.

Posted 2 Days AgoFull timeJR_002436

Barings is a leading global asset management firm dedicated to meeting the evolving investment and capital needs of our clients. We build lasting partnerships that leverage our distinctive expertise across traditional and alternative asset classes to deliver innovative, institutional-quality solutions and service.

Our team-driven culture is based on transparency, responsibility and putting our clients interests first. We listen to our clients to understand their needs, so that we can be a strategic advisor and long-term partner in meeting their unique investment goals. Risk management and protecting our investors capital over the long term is an essential component of our lasting partnerships.

Barings is also committed to building long-term relationships with our associates and providing opportunities and support to help them succeed. With our expanding business and global footprint, Barings offers a wealth of opportunities for associates who share our culture, values and commitment to excellence in client service.

As an organization, we believe that a diversity of perspectives and strengths is essential to meeting the evolving needs of our clients, and we are committed to attracting and retaining a talented workforce as diverse as the clients and communities that contribute to our success.