Security Engineer at Yext

The Information Security Engineer will implement, execute, and maintain technology solutions to mitigate risk and protect IT and Engineering environments from cyber threats. This includes deploying, tuning, and managing security tools, providing support for the security incident response cycle, and identifying the latest cyber threats. Responsibilities include leading and improving the security engineering team's day-to-day operations, enhancing current security controls, and identifying areas for improvement. The role involves deep hands-on security experience with cloud providers (AWS, GCP, Azure), understanding automated security testing approaches and tools, and proactively integrating security into the development process. Continuous improvement of security tools (SIEM, IDS, EDR) is expected, along with working with customers to incorporate high-quality security alerting into their workflows and improving overall security practitioner efficiency through process automation. Collaboration among IT, Infrastructure, and Risk Management Departments is encouraged. The engineer will be responsible for advanced threat and vulnerability hunting and remediation, maintaining security tools, creating run books, performing troubleshooting, and leading the technical evaluation of new security technologies. They will also work with audit teams for security, SOX, and SOC audits, collect data for metrics, generate reports, and assist the Information Security Director in developing policies and procedures for logging, monitoring, response, and escalations.