STAGE (stage.in)

STAGE (stage.in)

Security Engineer

Boston or New York

Sponsorship not specified$125k-$150kDetected 26 days ago
SQLAWSGCPAzureCloud PlatformsLinuxCybersecurityPenetration TestingNetwork SecurityTCP/IPDNSFirewallVPNLoad BalancingZero TrustCollaborationAdaptability

About the role

  • KKR is a leading global investment firm that offers alternative asset management as well as capital markets and insurance solutions.
  • KKR aims to generate attractive investment returns by following a patient and disciplined investment approach, employing world-class people, and supporting growth in its portfolio companies and communities.
  • KKR's insurance subsidiaries offer retirement, life and reinsurance products under the management of Global Atlantic Financial Group.

Responsibilities

  • Design, implement, and manage network security solutions, including firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and network access control (NAC).
  • Develop and enforce network security policies, procedures, and standards.
  • Configure and manage secure email gateways to protect against phishing, spam, malware, and other email-based threats.
  • Implement and maintain email encryption protocols.
  • Deploy and manage endpoint security solutions, including antivirus, antimalware, EDR (Endpoint Detection and Response), and DLP (Data Loss Prevention) tools.
  • Develop and manage vulnerability management programs, including regular scanning, assessment, and remediation.
  • Ability to work calmly under pressure and meet deadlines and solve problems requiring creativity, initiative and drive; self-motivated and enjoys a sense of pride in their accomplishments

Requirements

  • Knowledge of common security principles, concepts, and methods (authentication, authorization, single sign-on, network segregation, DMZ, Zero Trust, defense-in-depth, penetration testing, sandboxing etc.)
  • Understanding of principles of operation of NextGen/L7 firewalls and experience with one of the market-leading vendors
  • Practical knowledge of Windows (including AD) and Linux
  • Knowledge of SSL/TLS traffic handling and encrypt/decrypt policies.
  • Experienced security professional with a strong background in networking, infrastructure, and security, ideally gained in organizations of various sizes and through working in multiple roles with diverse technologies and products.
  • Understanding of core principles of how modern infrastructure technologies operate (such as virtualization of computing and networking, containers, cloud computing, SaaS, PaaS etc) and the security aspects of these technologies
  • Solid understanding of the operation of LAN/WAN IP-based networks (TCP/IP, routing/switching, VLANs, NAT, DNS, DHCP)
  • Understanding of principles of applied cryptography - symmetric/asymmetric encryption, hashing, SSL/TLS, SSH, PKI, IPSec, site-to-site/remote access VPN, disk encryption, HSM
  • Understanding of attack vectors against modern enterprises: phishing, ransomware, malware, DoS/DDoS, drive-by, MITM, various type of injection (i.e. SQL), cross-site scripting, etc.
  • methods of defense from these attacks
  • Ability and desire to code, script and automate in order to improve own and team's operational efficiency
  • Understanding of aspects of application delivery in principle and firewalling/load balancing in particular
  • Understanding of HTTP operation and associated concepts (its methods, cookies, sessions, caching, CDNs, HTTP-based applications and protocols etc)
  • Team-player who enjoys working in a collaborative and collegial environment and is an active contributor as part of a global team

Skills

  • Ensure endpoint devices are compliant with security policies and have the latest security patches and updates.
  • Respond to and mitigate endpoint security incidents.
  • Ensure the security of cloud-based infrastructure, applications, and services.
  • Experience in financial systems, cloud (AWS/Azure), or AI security is highly valued.

Compensation

  • $125,000 - $150,000 USD
  • KKR will provide reasonable accommodations as required by applicable federal, state, and/or local laws.
  • Emails sent for unrelated issues, such as following up on an application, will not receive a response.
  • Only emails left for this purpose will be returned.
  • Massachusetts Applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment.
  • An employer who violates this law shall be subject to criminal penalties and civil liability.

Equal opportunity

  • KKR is an equal opportunity employer.

This listing is sourced directly from STAGE (stage.in)'s careers page and normalized into a canonical job model.