Enterprise & Cloud Security Engineer

## Job Details: Enterprise & Cloud Security EngineerFull details of the job.| | || --- | --- || | || | || --- | --- || | Enterprise & Cloud Security Engineer || | VN992 || | Enterprise and Cloud Security Engineer || | Minneapolis || | Solifi deliver a solid financial technology foundation for equipment, working capital, wholesale, and automotive finance firms. At Solifi, we believe that commerce is only as strong as the system it runs on. Our mission is to reshape finance technology by bringing together proven solutions into a singular powerful technology platform designed to help protect and scale financial organizations. We guard our customers by being precise and reliable, we guide their success by combining powerful technology with proven expertise, and we help them grow by unleashing their potential. || | | | | --- | | The Enterprise and Cloud Security Engineer to join our ISG (Information Security Group), reporting to the Cyber Security Manager. The ISG team is responsible for protecting Solifi’s infrastructure, applications, and data assets. The Security Engineer will be working cross-functionality with IT, SaaS and Hosting, and Engineering teams. | || | The Enterprise and Cloud Security Engineer is responsible for contributing to the design, development, testing, and implementation of security systems within the organization's IT network and SaaS Solutions. Their primary responsibility is to help safeguard the organization's information assets against potential threats by supporting a comprehensive, layered security approach that aligns with industry standards and best practices. || | • Develops an understanding of current and emerging threats and contributes to threat research and the development of the organization's security strategy. • Assists in designing security systems and recommends enhancements to senior leadership to improve the organization's security posture. • Analyzes attacker tactics, techniques, and procedures (TTPs) from security events across a diverse array of security devices and end-user systems. • Performs regular system tests and actively monitors network security to identify and mitigate vulnerabilities. • Ensures role-based access control (RBAC) is implemented and maintained across IT systems to uphold the principle of least privilege. • Assists in establishing disaster recovery procedures, conducting security drills, and evaluating readiness. • Contributes to the development and maintenance of Incident Response (IR) plans and playbooks to ensure effective handling of security incidents. • Supports responses to security incidents, including post-event analysis to identify root causes and improve future resilience. • Communicates and collaborates effectively with cross-functional teams to integrate security practices throughout the organization's infrastructure. • Evaluate and recommend security technologies that strengthen the organization’s defensive posture. • Help with Security tools migration and merging security processes and procedures. || | | | | --- | | * A Bachelor’s degree in information technology/security. * 2-4 years of experience in the IT/Information Security field, or an equivalent combination of education and experience. * Understanding of Information Security and IT Risk Management. * Familiarity with current IT risks and security solution implementation. * Basic project management skills and progress reporting. * Experience with standard security tools such as SIEM or Security Monitoring, Endpoint Protection / Response, Email Security Platforms, Web Gateway / Security Platforms, Cloud Security * Ability to interact with diverse personnel to support security measures. * Skill in planning, organizing, and prioritizing workloads. * Good written, verbal communication, business acumen, and commercial outlook. * Any of the following certifications is a plus: Security+, CEH, CISSP, CISM, CCSP, CCSK, GCIH, GCIA. **Additional Competencies** * **Analytical**: Synthesizes complex and diverse information; collects and researches data to inform decisions; leverages intuition and experience to complement data analysis; designs efficient workflows and procedures to enhance operational effectiveness. * **Business Acumen**: Understands the business implications of decisions and their impact on profitability; demonstrates a strong knowledge of market trends and competition; aligns work and initiatives with the organization's strategic goals and vision. * **Innovation**: Exhibits original thinking and creativity; tackles challenges with resourcefulness; generates actionable suggestions to improve processes and performance; develops and implements innovative approaches and ideas that capture attention and inspire collaboration. * **Communication and Presence**: Communicates clearly and effectively in verbal, written, and presentation formats across diverse audiences, including teams, vendors, customers, and stakeholders at various organizational levels. * **Planning and Organizing**: Prioritizes and plans work activities effectively; uses time and resources efficiently; anticipates future needs and allocates resources accordingly; sets clear goals and objectives; organizes and schedules tasks to execute realistic and actionable plans. * **Drive for Results**: Applies analytical thinking and creativity to identify and address complex challenges with innovative problem-solving strategies; evaluates potential risks and proactively develops and implements strategies to mitigate them, ensuring successful outcomes. * **Strategic** **Thinking**: Develops and executes long-term strategies that align with the company’s vision and objectives; demonstrates the ability to anticipate trends and adapt plans to achieve organizational success. **Technical Competencies** * **Foundational Technical Skills**: Continuously assesses strengths and areas for growth; actively pursues training and development opportunities; strives to build and expand technical knowledge; shares expertise with peers to foster team growth. * **Network Security:** Demonstrates strong knowledge of networking fundamentals, including firewalls, intrusion detection systems (IDS), access control, and VPNs, to protect and secure network infrastructure. * **System Security:** Proficient in implementing data protection, hardware security, and endpoint protection solutions to safeguard systems and sensitive information. * **Incident Response:**Deep understanding of the core stages of the incident response lifecycle, including preparation, identification, containment, eradication, and recovery, to mitigate and respond to security incidents effectively. * **CyberSecurity Technologies:**Hands-on experience with tools and platforms such as Kali Linux, AWS, Azure, SIEMs, SOARs, SentinelOne, Wiz, Azure Defender, Palo Alto, Imperva, and 1Password (or similar tools). * **Platforms & Operating Systems:**Proficient in working with multiple platforms & operating systems, including AWS, Azure, Windows OS, macOS, Linux OS, Containers. * **Application Security:**Knowledge of secure coding practices, patch management, and vulnerability remediation to protect applications from security threats. * **Vulnerability Assessments:**Skilled in identifying, assessing, reporting, and mitigating vulnerabilities to reduce risks and enhance system security. * **Governance:**Knowledgeable in risk management and regulatory compliance, ensuring alignment with industry standards and organizational policies. | || | 3 years || | Bachelor's Degree || | Full Time || | Medical, Dental, Vision, Flexible Spend Account (FSA), Health Savings Account (HSA), Life and Accidental Death & Dismemberment (AD&D) Insurance Coverage, Disability Insurance Coverage (Short Term and Long Term), Employee Assistance Program (EAP), 401K Tax Deferred Retirement Savings Plan || | 01 Aug 2026 | #J-18808-Ljbffr