Security Engineer, Senior Cover Letter

Please consider me for the security engineer, senior opportunity. I am including my resume that lists my qualifications and experience.

Previously, I was responsible for guidance on NIST 800-53 security control implementation.

I reviewed the requirements of the job opening and I believe my candidacy is an excellent fit for this position. Some of the key requirements that I have extensive experience with include:

• Intimate knowledge of industry frameworks related to information security
• Current industry recognized security certification (CISSP, GIAC, CRISC)
• Experience working in environment with regulatory compliance requirements (HIPAA, PCI)
• Research, architect, develop, deploy and operate network, endpoint, web and access security controls
• Work on diverse projects including new implementations, upgrades, and process automation across the entire technology organization
• Experience controlling the threat surface area, identifying attack vectors, vulnerabilities and establishing appropriate controls
• Ethical Hacking or Security Analyst experience helpful
• Prior experience in leading or participating in Incident Response/Handling teams

I would like to submit my application for the security engineer, senior opening. Please accept this letter and the attached resume.

Previously, I was responsible for technical expertise to designing and maintaining a global information security program, complex forensic investigations, security incident response, and security architecture design projects.

Please consider my qualifications and experience:

• Experience with Security Engineering and Assurance methodologies fuzzing, static and dynamic code analysis
• Strong understanding of AWS services, architectures, and
• Experience with web application security controls such as web application firewalls, OWASP best practices
• Experience with coding in Terraform (Infrastructure as code)
• Experience developing designs, processes and procedures
• Experience with deployment technologies such as Chef, Ansible
• Experience with code management technologies such as GibHub, Stash, etc
• Experience with setting up VPNs, configuring route tables, managing firewall rules

I submit this application to express my sincere interest in the security engineer, senior position.

In my previous role, I was responsible for support for facilitating and helping the A&A team identify and implement security controls in accordance with NIST and FedRAMP security requirements.

I reviewed the requirements of the job opening and I believe my candidacy is an excellent fit for this position. Some of the key requirements that I have extensive experience with include:

• Cryptography and Public Key Infrastructure
• Security Monitoring & Incident Handling
• Understanding of various architectural frameworks and controls (CIS 20, NIST)
• Hands on experience with Incident Response or previous participation with Incident Response teams such as the role of a first responder, someone who helps with analysis, forensics
• Practical experience in deployment and management of applied IT security technologies and tools such as endpoint protection, detection, and response, PIM/PAM, e-mail encryption, data loss prevention (DLP) technologies, network access control, intrusion detection/prevention systems
• Professional security certification CISSP, CISM, CSA, CEH or similar
• Knowledge of OWASP Web/API vulnerabilities and compensating controls (CSRF, XSS, SQLI)
• Good understanding of Enterprise Change Management processes

I submit this application to express my sincere interest in the security engineer, senior position.

Previously, I was responsible for support for facilitating and helping engineering and operational teams identify and implement security controls in accordance with NIST and FedRAMP security requirements.

Please consider my experience and qualifications for this position:

• Strong Microsoft Bitlocker (Microsoft Bitlocker Administration and Monitoring)
• Good Windows Firewall
• Good Active Directory Group Policy Management
• Good Knowledge of common Security Principles like AAA / network segmentation / Defense in depth
• Good Understanding of Client / Server Architectures
• Have proven skills in network and system security / administration, security monitoring, incident response, intrusion analysis and computer forensics, analysis of malicious code and exploits
• Have expert knowledge of the diverse methods and technologies used to protect web/mobile/desktop applications, SaaS infrastructure, and data
• Expert knowledge of protocols and troubleshooting

In response to your job posting for security engineer, senior, I am including this letter and my resume for your review.

Previously, I was responsible for direction and thought leadership to enterprise-wide cloud initiatives applying security principles such as defense in depth, identity & access control, encryption, automation, orchestration, drift detection etc covering all the phases of cyber kill-chain and NIST domains.

My experience is an excellent fit for the list of requirements in this job:

• Recognized internally and externally as an expert in cyber security
• Contact with project leaders, the customer program leadership, and professionals within the Engineering department and with project teams
• Experience in both Linux and windows
• Experience securing assets in the Cloud, AWS (Extra Points for Google Cloud)
• CISSP and GIAC certifications strongly preferred
• Advanced technical background and able to understand network, operating system, database, and application development design and support
• Experience producing technical documentation, spreadsheet reports, and visual presentations
• Scripting or general purpose programming languages (JavaScript, PowerShell, Python, ) preferred