Security Threat Intelligence Center - Principle Engineer - Full-time / Part-time

POSITION PURPOSE

The Home Depot’s Threat Detection & Response Center is hiring for a Principle Engineer to help create its TI capability. The Principle Engineer- Security Threat Intelligence Center is responsible for ingesting, analyzing, enhancing, categorizing and storing information related to threats and threat actors. The constituency for the role is large and diverse and for the right candidate there are plenty of opportunities to demonstrate success and to move the needle quickly. The group has access to over 400 Gbps of network traffic via an impressive tap aggregation system and takes in over 200,000 curated security events per second. The team has a large amount of flexibility in the tools that are used, with a strong preference for open source.

The Principal, Systems Engineering, guides the development, maintenance, and support of The Home Depot's technical infrastructure that includes network, hardware, database, and system software components. They have an in-depth understanding of the technology landscape and act as the face of the Systems Engineering group to other areas of the organization. In addition, they provide technical guidance to more junior Systems Engineers.

MAJOR TASKS, RESPONSIBILITES AND KEY ACCOUNTABILITIES
40% - Strategy & Planning:
Researches and analyzes business trends and behavioral data to identify opportunities for improvements and new initiatives
Leads the evaluation, development, and recommendation of specific technology products and platforms to provide cost-effective solutions that meet business and technology requirements
Researches and designs best fit infrastructure, network, database, and security architectures for products
Guides the proactive creation and maintenance of tools for monitoring and support
Leads project budgeting, planning, and management across multiple efforts and teams
Develops and delivers formal training courses
Visits with operational units (e.g., warehouses, stores, data centers) to understand needs and build relationships
20% - Delivery & Execution:
Guides configuration, debugging, and support for infrastructure
Guides field and corporate roll-outs of technology
Guides the stand up of necessary system software, hardware, and equipment (physical or virtual) to meet changing infrastructure needs
Creates and optimizes specifications for complex technology solutions
Produces and manages purchase requests for hardware and software
Creates technical white papers and thought leadership
Creates and enforces process standards
Leads disaster recovery planning and engineering efforts
Collaborates with other leaders to drive build versus buy decisions with regard to technology
30% - Support & Enablement:
Collaborates with product and project teams to understand needs and enable them with infrastructure
Guides technology architecture design review efforts for project and product teams
Leverages tooling and custom applications to monitor the operational status of applications, infrastructure, networks, databases and security; optimizes and tunes performance as appropriate
Guides root cause analysis, debugging, support, and post-mortem analysis for security incidents and service interruptions
Guides maintenance, upgrades, and support for existing systems and infrastructure to ensure operational stability
Acts as a vendor relationship manager
Guides the production of in-house documentation around solutions
Monitors tools and proactively helps teams struggling with systems issues
Provides application support for software running in production
Guides the creation of scripts and tools that drive automation and enable product teams and end users to move towards self service
Acts as a mentor to more junior Systems Engineers
10% - Learning:
Keeps abreast of innovations and industry trends as well as changes to internal systems and determines how they impacts tools, training, and support necessary to keep systems up, running, and secure
Participates in and contributes to learning activities around modern systems engineering core practices (communities of practice)
Leads learning efforts inside the organization focused on systems engineering
Proactively views articles, tutorials, and videos to learn about new technologies and best practices being used within other technology organizations

NATURE AND SCOPE
Typically reports to the Systems Engineer Manager or Sr. Manager, Technology Director or Sr. Director.

ENVIRONMENTAL JOB REQUIREMENTS
Environment:
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
Travel:
Typically requires overnight travel less than 10% of the time.
Additional Environmental Job Requirements: MINIMUM QUALIFICATIONS
Must be eighteen years of age or older.
Must be legally permitted to work in the United States.

Additional Minimum Qualifications:
Must be legally permitted to work in the United States

Education Required:
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.

Years of Relevant Work Experience: 6 years

Physical Requirements:
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.

Additional Qualifications:
Preferred Qualifications:
6-8 years of relevant work experience
We are looking for someone with the following interests:

• Correlating lots of data
• TTPs
• Tracking Threat Actors
• IOC Wrangling

The ideal candidate has the following skills:

• A very solid understanding of the modern attack chain and offensive security
• Threat Intelligence experience
• The ability to reduce large amounts of written information into an actionable report

Experience with the following technologies is nice to have:

• Splunk
• Elasticsearch
• Suricata
• Tanium

Scripting ability is nice. We use python, go, and rust.
Professional experience in two of the following areas: Infrastructure Engineering, Network Engineering, Database Engineering, or Security Engineering; familiarity with at least one other, and interest in the growing in the remaining disciplines
Proficiency in working as part of a collaborative, cross-functional, modern engineering team
Proficiency in infrastructure, network, database, or security troubleshooting and remediation; experience with at least one other
Proficiency in installing and upgrading applications or databases and performing system maintenance
Experience with networking, system and hardware design and architecture, DBMS concepts, SQL programming, and client server concepts
Proficiency with debuggers, runtime analysis, library systems, compiled programming, and software update tools
Proficiency in system and environment analysis, design, and optimization
Experience with object oriented programming languages (preferably Java), distributed computing environments, and code reviews
Experience with system security design and management
Experience with disaster recovery planning and engineering
Proficiency in monitoring the operational status and performance of, and configuring as well as tuning, systems, networks, or databases
Proficiency in operating system commands and utilities as well as scripting
Proficiency working with cloud platforms such as GCP and Azure
Proficiency in supporting a 24x7 retail operation

Knowledge, Skills, Abilities and Competencies:
Action Oriented: Taking on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm
Business Insight: Applying knowledge of business and the marketplace to advance the organization s goals
Collaborates: Building partnerships and working collaboratively with others to meet shared objectives
Communicates Effectively: Developing and delivering multi-mode communications that convey a clear understanding of the unique needs of different audiences
Cultivates Innovation: Creating new and better ways for the organization to be successful
Drives Results: Consistently achieving results, even under tough circumstances
Global Perspective: Taking a broad view when approaching issues; using a global lens
Interpersonal Savvy: Relating openly and comfortably with diverse groups of people
Manages Ambiguity: Operating effectively, even when things are not certain or the way forward is not clear
Manages Complexity: Making sense of complex, high quantity, and sometimes contradictory information to effectively solve problems
Nimble Learning: Actively learning through experimentation when tackling new problems, using both successes and failures as learning fodder.
Optimizes Work Processes: Knowing the most effective and efficient processes to get things done, with a focus on continuous improvement
Self-Development: Actively seeing new ways to grow and be challenged using both formal and informal development channels
Situational Adaptability: Adapting approach and demeanor in real time to match the shifting demands of different situations