Big Data Platforms Compliance Engineer

Key Skills

Analytical and Problem solving, Apache Hadoop, Big Data Technology, Cryptography, Effective communication skills, Java Programming, Linux Operating system

Job Description

The Big Data Platforms Security Engineer will be responsible for overall security compliance of the Big Data ecosystem as well as DevSecOps for our next generation compute platform built on Kubernetes. These responsibilities involve configuration hardening, logging and monitoring, access administration, engineering new security features and general subject matter consultation across Big Data tenant landscape. Primary responsibilities include, but not limited to:

• Big data platform security and vulnerability management including configuration hardening of a group of highly dependent software components
• Security assurance engineering in a big data platform environment including application of Kerberos, LDAP based authentication
• Enforcement of security policies, controls and standards.
• Ensure that all platform components are fully secure against unauthorized access, inappropriate penetration, web intrusion, denial of service attacks and all other vulnerabilities.
• Lead development of security architectures to support a large scale global user community with complex information authorization rules and requirements.
• Conduct fact-based evaluations of security architecture alternatives, mediate opposing viewpoints and negotiate equitable outcomes that ensure stable solutions.
• Evaluate and recommend new security technologies, processes and methodologies. Conducts these reviews in a timely manner in order to support project timing requirements while balancing the need for architectural conformance with business needs.
• Guide the adoption and deployment of field level encryption technology throughout the enterprise
• Contributes to the identification and development of security requirements based on industry experience and best practices.
• Drive maintenance and continuous evaluation of cyber threat intelligence
• sources for changes that can increase effective and timely response.
• Qualifications
• Demonstrated proficiency in a wide range of information security technologies and platforms
• Significant engineering, configuration, and software installation experience
• Knowledge and experience in Security Incident Management processes and best practices
• Hands on experience with LDAP and Active Directory, federated authentication and single sign-on including related technologies such as Kerberos & SAML
• Knowledge of various encryption technologies & algorithms for encryption at rest and in transit
• Experience with key & certificate management, protection and certificate based authentication
• Strong knowledge of Linux file system hierarchy, package management and command line interface
• Familiarity with the Hadoop ecosystem, internal dependencies and the logging landscape
• Understanding and cloud security and CASB products & technologies
• Knowledge of shell scripting and Java programing language including cryptographic libraries
• Experience with directory based authorization and access control
• Understanding of data classification concepts and entitlements
• Strong analytical and problem solving abilities
• Manage a catalog of security data and dashboards that can be tailored for various audiences
• Strong listening and communications skills, with ability to clearly and concisely explain complex problems and technologies
• Highly collaborative work style and ability to work with a cross-functional team
• Experience

  Ten or more years of experience in Information Technology with a minimum of five to seven years of experience relevant to the position. Employment experience in a Fortune 100 company is a plus.

  Education

• Bachelor's degree in an information technology or security technical discipline is preferred.
• An information security professional certification such as CISSP is preferred. 
• Master’s level degree in a technical discipline is viewed favorably.

Hybrid:

Position does not require an employee to be on-site full-time but the general expectation is that the employee be onsite an average of three (3) days each week.

Additional Description

About GM

Our vision is a world with Zero Crashes, Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better, safer and more equitable for all.

Why Join Us 

We aspire to be the most inclusive company in the world. We believe we all must make a choice every day – individually and collectively – to drive meaningful change through our words, our deeds and our culture. Our Work Appropriately philosophy supports our foundation of inclusion and provides employees the flexibility to work where they can have the greatest impact on achieving our goals, dependent on role needs. Every day, we want every employee, no matter their background, ethnicity, preferences, or location, to feel they belong to one General Motors team.