Why We Work at Dun & Bradstreet

We are at a transformational moment in our company journey - and we're so excited about it. Each day, we are finding new ways to strengthen our award-winning culture, and to accelerate creativity, innovation and growth. Our purpose is to help customers improve business performance with Dun & Bradstreet's Data Cloud and Live Business Identity, and we're wildly passionate and committed to this purpose. So, if you're looking to make an immediate impact at a company that welcomes bold and diverse thinking, come join us!

Team Overview:

Our Global Security and Risk team is responsible for securing the technologies, applications and data that millions of our customers rely on every day. We are building a best-in-class team of security experts with a relentless focus on results, creativity in solving business challenges, a passion to develop their own careers and further their knowledge in security, and can work closely with our business units, technology teams and customers. In working with us - you'll help to continuously improve the program, implement leading new technologies, and be part of our company transformation.

• The Senior Security Engineer would be our technical SME within the System Security domain responsible for designing and implementing enterprise technology and procedural controls
• Extensive experience with system security concepts, tools, implementation and integration with various data sources and application stacks
• The ability to work across business units, IT teams and external partners to understand business requirements in order to design security controls and solutions
• Research business and technical challenges. Provide solution recommendations to mitigate risk and improve our security posture.
• Serve as security engineering lead for security technology implementations
• Translate architecture specifications to low-level component design and detailed functional specifications
• Support system and network security related policy development and regulatory compliance
• Provide general system security domain knowledge to improve the enterprise security architecture
• Validate that acquired or developed system(s) and architecture(s) are consistent with our cybersecurity architecture guidelines
• Perform security reviews, identify gaps in security architecture, and develop a security risk management plan
• Provide advice on project costs, design concepts or design changes
• Define and document how the implementation of a new system, or interfaces between systems, impacts the security posture of the current environment
• Drive business compliance to application security standards and controls e.g. vulnerability remediation, SAST/SCA onboarding
• Work towards developing the application security roadmap for the firm
• Provide leadership on different forums on promoting security awareness, including recommended solutions and staying current on net new threats, vulnerabilities and OWASP best practices
• Manage application security projects to address continuous risk and threats and to reduce vulnerability exposure for the firm

• Implementation, support, and development of database tokenization solution (Protegrity).
• Handling operational requests/tickets to support IT and Application teams.
• Designing and implementing enterprise technology and procedural controls. Development and monitoring of policies for the database activity monitoring solution. Working with DBAs to resolve database vulnerabilities. Executing database access recertification complex tasks. Monitoring health of security solutions. Executing daily tasks in support of security solutions. Mentor peer group and participate in knowledge exchange

• 7+ years relevant Information Security experience with a focus on endpoints and architecture
• Strong ability to design countermeasures to identify security risks. Knowledge of common security issues including malware, viruses, ransomware, and host intrusion.
• Strong knowledge of Data Encryption & Tokenization solutions
• Database Security Pro in Administration, Vulnerability Management, Access Control
• Solid understanding of: Software Engineering, Linux and Windows OS Admin and Jira Agile Project Management
• Strong technical acumen, communication and influence skills to demonstrate effectiveness of different application security initiatives
• Strong background in application security and well informed on key application security controls
• A professional certification in an Information Security domain such as CISSP, CISM or CISA preferred but not required