Staff Security Engineer

Overview

Intuit is a mission-driven, global financial platform company that gives everyone the opportunity to prosper. With products like TurboTax and QuickBooks, we’re using technology to build solutions to challenging financial problems for millions of people - powering prosperity around the world.

Intuit’s Adversary Management team is looking for a Staff Security Engineer that specializes in security data engineering and architecture, multi cloud solution development, and security analytics. Are you an expert in security, have big data development experience and want to drive development of insights into how the cyber attackers think, plan, and go after their targets? We are Intuit’s active defense team using Big Data, AI & Machine Learning to derive Threat Intelligence, enhance Threat Hunting, and laser target our Red Teaming efforts. Be a part of our mission and take your career to a whole new level with Intuit Information Security!

What you'll bring

• Strong CS fundamentals including data structures, algorithms and distributed computing
• Strong database fundamentals including SQL, performance and schema
• Strong understanding of security data architecture and implications toward effective utilization by AI/ML and GenAI models
• 7+ years of hands-on Software Engineering experience
• 5+ years of Python development
• Development experience in Go, Ruby, and scripting languages (Bash, JS)
• 5+ years working with Distributed Systems
• 7+ years of experience integrating technical processes and business outcomes – specifically: data and process analysis, data quality metrics/monitoring, data architecture, developing policies/standards & supporting processes.
• 5+ years working with Cloud Technologies (AWS, GCP preferred).
• Experience with various offerings from AWS, including EC2, IKS, Lambda, S3, CloudWatch, CloudTrail, VPC Flow Logs, EMR, Redshift, Data Pipeline, Athena and Kinesis are a plus
• Experience with GCP, including GCS, DataFlow, GCP ETL, Big Query, Looker Studio
• Experience developing infrastructure as code (TerraForm, CloudFormation)
• Understanding how security logging data supports security capabilities, such as TIP, SOAR, SIEM, Cyber Threat Intelligence, Attack Surface Monitoring, and Adversary Emulation
• Understanding of security finding data frameworks and standards, such as STIX/TAXII, OCSF, Parquet
• Experience with intrusion analysis, security log analysis, network and cloud reconnaissance
• Excellent interpersonal and communication skills, both verbal and written. Ability to communicate objectives, plans, status and results clearly, focusing on critical few key points.
• Demonstrated ability to work in a matrix environment, ability to influence at all levels, and build strong relationships with technical and non-technical partners
• Familiarity with integration of systems with oncall services, such as PagerDuty and ServiceNow
• BS in Computer Science or CyberSecurity, MS Preferred, equivalent experience will be considered
• AWS, GCP, and Security certifications are a plus
• History of contributing to open source projects is a plus
  
  

• Design and develop Big Data and real-time security analytics solutions using industry standard technologies with bias toward latest trends, such as GenAI and ML integrations
• Evaluate the data architecture and design of existing security data lake and warehouse solutions and contribute toward strategy and implementation of further enhancements
• Understand and apply the use cases and policies for system security logging across defensive and adversarial security landscape to better design Big Data solutions
• Bring expertise in AI/ML and data engineering to work with principle engineers on the team and across security organization to ensure that Big Data solutions are aligned with company-wide technology direction and enable deeper security insights
• Communicate progress across organizational levels clearly and in actionable form following internal frameworks and processes
• Serve as technical “go to” person for our core technologies – GCP and AWS data collection and ingest pipeline, AWS S3 data lake, BigQuery data warehouse and developed integration services
• Demonstrate strong implementation aptitude to translate customer objectives into scalable solutions while meeting deadlines
• Lead by example, demonstrating best practices for Agile Development, unit testing, CI/CD, IAAS, performance testing, capacity planning, documentation, monitoring, alerting, and incident response
• Coach, teach, and help develop and retain security engineering talent within the organization and participate in hiring process
• Learn, innovate, simplify and inspire others with ideation and experimentation
• Demonstrate commitment to your professional development by attending and speaking at conferences, taking training classes, giving technical presentations, and participating in developer and security communities inside and outside of Intuit