Information Security Principal Engineer

Your potential has a place here with TTEC’s award-winning employment experience. As an Information Security Principal Engineer working remote in the United States, you’ll be a part of bringing humanity to business. #experienceTTEC

Our employees have spoken. Our purpose, team, and company culture are amazing and our Great Place to Work® certification in the United States says it all!

What You’ll be Doing:

As part of our Information Security team, you will support the compliance lifecycle needs of existing Federal clients as well as consult on new projects’ information security and compliance needs.  This role will provide vulnerability-management services to project teams, client personnel and on-behalf of stakeholders to comply with a federal agency’s comprehensive security program and the NIST Risk Management Framework (RMF).

During a Typical Day You’ll:

• Configure and execute vulnerabilty scans of FedRAMP environments, review the results and prepare for in-depth conversations on the findings
• Be a key player in preparing, validating, and maintaining security documentation including, but not limited to: system security plan (SSP), risk assessment (RA), contingency plan (CP), privacy impact assessment (PIA) and FIPS categorization
• Provide support for the security life cycle of major applications to the TTEC/ Federal project staff and client stakeholders
• Work with all levels of internal and client project team members and establish and maintain a strong customer-focused working relationship
• Advise stakeholders on how to address security and privacy weaknesses identified when working with client related teams
• Have strong analysis, oral and written communication, change management and communications skills
• Prepare and deliver security and privacy awareness training to different team audiences
• Identify and mitigate security risks especially if different from risks managed at the project level
• Collaborate with project teams to manage security assessments (Security Assessment and Authorization [SA&A] or Certification and Accreditation [C&A] activities) and audits
• Identify and manage POA&Ms through remediation as well as develop corrective action plans for each POA&M 

What you Bring to the Role:

• 3+ years of experience in Federal government information security and privacy providing direct support to project teams and client stakeholders
• 7+ years in CyberSecurity with 4+ years of hands-on experience with industry-standard vulnerability management tools such as Qualys, Tenable, or Rapid7
• Perform vulnerability assessments, conduct research and evaluate relevant risks to the findings
• Write runbooks to assist junior-level Engineers and other team members with appropriate reactions and activities based on finding types
• Capable of self-direction in situations involving complex vulnerabilities that require in-depth troubleshooting
• Ensure solid communication with key stakeholders, including progress on issues or findings and setting relevant expectations
• Must be able to participate in and / or lead security assessments and audits Experience with Protected Health Information (PHI), Personally Identifiable Information (PII) in Federal healthcare programs and Payment Card Industry Data Security Standard (PCI DSS)
• Experience in preparing security documentation, evaluating and documenting security and privacy controls, and completing non-technical analysis activities
• Experience with FedRAMP, NIST 800-53 Rev 4 (or 800-171) or agency equivalent

Nice To Have

• Some experience with common penetration tools/frameworks (Open Source or Commercial)
• Bash and/or Python scripting experience and building API-based integrations

What You Can Expect

This is a 100% work from home position.

Working with a company and team that is supportive of your career and professional development

An inclusive culture and community minded organization where giving back is encouraged

A global team of curious lifelong learners guided by our company values

Paid time off (PTO) plus wellness and healthcare benefits

And yes... a great compensation package and performance bonus opportunities, benefits you'd expect and maybe a few perks that would pleasantly surprise you (like tuition reimbursement)

Visit TTEC Benefits for U.S. Employees | TTEC for more information.

The anticipated range is $100,000-120,000. Actual compensation offers to a candidate may vary based upon geographic location, work experience, education and/or skill levels.

About TTEC
Our business is about making customers happy. That's all we do. Since 1982, we've helped companies build engaged, pleased, profitable customer experiences powered by our combination of humanity and technology. On behalf of many of the world's leading iconic and hypergrowth brands, we talk, message, text, and video chat with millions of customers every day. These exceptional customer experiences start with you.

TTEC is proud to be an equal opportunity employer where all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. TTEC embraces and is committed to building a diverse and inclusive workforce that respects and empowers the cultures and perspectives within our global teams. We aim to reflect the communities we serve, by not only delivering amazing service and technology, but also humanity. We make it a point to make sure all our employees feel valued, belonging, and comfortable being their authentic selves at work. As a global company, we know diversity is our strength because it enables us to view things from different vantage points and for you to bring value to the table in your own unique way.