Allvue Systems

Tech Risk Security Operations Engineer I

Allvue Systems seeks a Tech Risk Security Operations Engineer I with 2+ years' experience in information security. Responsibilities include incident response, security monitoring, code reviews, threat modeling, and application security controls. Must-haves: Strong security principles understanding, problem-solving, and communication skills. Experience with SIEM, EDR, and application security testing is essential.

<div class="jobs-box__html-content jobs-description-content__text t-14 t-normal
 jobs-description-content__text--stretch" id="job-details" tabindex="-1">
 <h2 class="text-heading-large">
 About the job
 </h2>

 <div class="mt4">
 
 We are Allvue Systems, the leading provider of software solutions for the Private Capital and Credit markets. Whether a client wants an end-to-end technology suite, or independently focused modules, Allvue helps eliminate the boundaries between systems, information, and people. We’re looking for ambitious, smart, and creative individuals to join our team and help our clients achieve their goals. Working at Allvue Systems means working with pioneers in the fintech industry. Our efforts are powered by innovative thinking and a desire to build adaptable financial software solutions that help our clients achieve even more. With our common goals of growth and innovation, whether you’re collaborating on a cutting-edge project or connecting over shared interests at an office happy hour, the passion is contagious. We want all of our team members to be open, accessible, curious and always learning. As a team, we take initiative, own outcomes, and have passion for what we do. With these pillars at the center of what we do, we strive for continuous improvement, excellent partnership and exceptional results. Come be a part of the team that’s revolutionizing the alternative investment industry. Define your own future with Allvue Systems! Incident Response <ul><li> Monitoring of security events in the SIEM and other security feeds, taking appropriate action based on the company security policy</li><li> Identify incidents and lead investigations, reporting, documentation, and resolution</li><li> Creation of reports, dashboards, and metrics for security operations based on detected incidents/events </li></ul>
AppSec <ul><li> Perform security code reviews and threat modeling</li><li> Supports the implementation and enforcement of secure design principles according to policies, standards, and patterns of Information Security</li><li> Participate in and support application design/security reviews, threat modeling, including code review and security testing (including APIs)</li><li> Developing and maintaining documentation of application security controls</li><li> Support and consult with development and engineering teams in the areas of application security</li><li> Create Security guidance/documentation for development/engineering teams </li></ul>
BS in Computer Science, Software Engineering, Cybersecurity, or an equivalent technical degree <ul><li> 2+ years’ experience working in information security</li><li> Strong knowledge of information security principles, standards, and best practices</li><li> Demonstrated problem-solving, analytical skills, and technical troubleshooting skills</li><li> Strong written, oral, and interpersonal communication skills</li><li> Ability to effectively prioritize and execute tasks</li><li> Experience with security tools such as SIEM, EDR, Anti-virus, IPS, etc.</li><li> Experience performing threat modeling and secure code reviews on applications and systems</li><li> Experience in identifying and remediating common web application vulnerabilities such as OWASP Top 10</li><li> Familiarity with continuous integration and continuous deployment (CI/CD) pipelines as well as how security fits into the delivery process (i.e. DevSecOps)</li><li> Knowledge of standard approaches and tools for performing static application security testing (SAST), dynamic application security testing (DAST), and software component analysis (SCA) is a must</li><li> Programming/development experience using C#, .NET is a plus</li><li> Application penetration testing experience with BurpSuite, Zap, etc. is a big plus</li></ul>

 
 </div>
 </div>