Privacy and Security Engineer

As a Security Engineer II, you play a critical role in safeguarding Kubota’s people, processes, technology, and information. You will support the operation and maintenance of security programs and technology solutions. This role requires technical expertise in security tooling, and the ability to collaborate across departments to ensure a secure environment. You must have demonstrable experience supporting implementation and/or daily operations of cybersecurity processes and technology. In addition, you must demonstrate a commitment to delivering white glove service by consistently providing personalized, high-quality support and solutions to clients and customers. This includes anticipating needs, resolving issues with empathy and urgency, and ensuring every interaction reflects excellence and professionalism., This position does the following in accordance with all applicable Federal, State and local laws / regulations and the Company’s policies, procedures and guidelines:

Security Operations:

• Primary engineer for operations and maintenance of security technology and tooling, including but not limited to: SIEM, DLP, EDR, VM, GRC, RASP, IAST, WAF, IR, SOAR, Security Automation, and Application Security.
• Support daily operations of Security Engineering workflows and processes.
• Support governance of security infrastructure requirements against internal and external threats.

Threat Detection and Incident Response:

• Support and at times, lead security investigations, forensic analysis, and delivery of technical and executive-level incident reports.
• Proactively hunt for advanced threats using behavioral analysis and telemetry.
• Contribute to the body of knowledge for the Security Engineering team to better secure, monitor, and respond to cybersecurity threats and incidents.
• Maintain current knowledge of security threats and vulnerabilities that could impact the Kubota brand and business.

Cross Functional Collaboration:

• Execute tasks to define and build processes necessary to protect on-prem and cloud infrastructure and networks.
• Support collaboration with IT and business teams to troubleshoot and resolve complex security issues, provide guidance on security requirements, understand business needs, and improve the security posture of KNA and its Affiliates.
• Be proactive in ensuring KNA meets industry security & privacy compliance standards.
• Review and prioritize security test results; support tasks related to implementation of recommended remediation measures or mitigating controls.
• Foster a collaborative team culture focused on continuous improvement and learning.
• Ad hoc duties as assigned by management.

• High School diploma or GED required.
• Bachelor’s degree in information security, computer science, or computer engineering preferred:
• With a degree: 3+ years of relevant experience.
• In lieu of a degree: 7+ years of relevant experience.
• Proficiency in security architecture principles to promote and develop new designs and security strategies across all types of infrastructure including cloud, on-prem & cloud-based applications.
• Experience in a hybrid infrastructure environment, preferable with Azure cloud services.
• Experience with Threat Intelligence and Security Operations processes and procedures.
• Good understanding of industry standard security tools.
• Product engineering experience in Linux and Windows.
• Knowledge of regulatory requirements (i.e., PCI, HIPAA, GLBA, SOX) and security frameworks (e.g., NIST CSF, OWASP, CSA cloud control matrix, MITRE etc.)
• Working knowledge of application security concepts, static/dynamic security analysis, software composition analysis, secrets management, WAF, RASP and related tools.
• Strong engineering experience in 2 or more areas: cloud security, network security, endpoint security, application security, security architecture, incident response, IAM, SIEM, SOAR, threat intelligence, mobile device security, vulnerability management, data protection solutions, security analysis, and/or anomaly detections.

PHYSICAL REQUIREMENTS

Requires sufficient personal mobility and physical reflexes, to permit the employee to function in a general office environment and accomplish tasks and duties as outlined above., Analysis Skills, Applications Security, Automation, Cloud Computing, Computer Engineering, Computer Science, Computer Security, Continuous Improvement, Corporate Policies, Cross-Functional, Dynamic Analysis, Endpoint Security, Engineering, Establish Priorities, Federal Laws and Regulations, Forensic Science, IR (Infrared), Identify Issues, Incident Response, Industry Standards, Information Technology & Information Systems, Information/Data Security (InfoSec), Internet Security, Linux Operating System, Machine Tool, Microsoft Windows Operating System, Mobile Devices, Needs Assessment, Network Security, Operational Support, Operations, Operations Processes, Operations Security (OPSEC), People Management, Privacy Controls, Problem Solving Skills, Process Improvement, Product Engineering, Regulatory Compliance, Security Analysis, Security Architecture, Security Attacks, Security Information and Event Management (SIEM), Security Infrastructure, Security Software, Service Delivery, State Laws and Regulations, Team Player, Technical Analysis, Technical Delivery, Technical Support, Telemetry, Virtual Machine (VM)