Security Engineer - Principal

Who We Are Bold. Unapologetic. Hardworking. We are building something special. Put simply: We power and secure the next global financial system.

At Core Scientific, we host best-in-class enterprise level blockchain hardware in expansive, state-of-the-art data center facilities. Our proprietary software stack automates blockchain mining optimization, pushes machine images and firmware, and monitors all aspects of our operations, ensuring our customers receive the highest possible ROI on their hardware investment.

But what makes us different from others in our industry, apart from our unrivaled white-glove customer service? We invest heavily in growing our own digital asset holdings, and pioneering innovative financial products and services to maximize our own, and our customers' portfolios, through blockchain technology.

Come join us as we focus exclusively on the game changing, hypergrowth financial technologies that are already diversifying markets and democratizing access to stores of value. Pioneering an industry isn't for the faint of heart. We require smart, creative, collaborative minds, who work hard and fast.

Intrigued? Then apply and be a part of something truly revolutionary at Core Scientific.

Title Security Engineer- Principal

Reports To Chief Information Security Officer

The Job

We're looking for an experienced DevOps Engineer who has a collaborative work style, especially in a highly virtual and cross-functional environment. Be a passionate, articulate, and positive team member. The engineer should have exceptional attention to detail and the ability to work independently while managing multiple projects and priorities. You should enjoy building great infrastructure to support internal and external facing systems.

This role has an impact that reaches all areas of Core Scientific, Operations to Finance, Technology and beyond. Joining as a senior member of the Information Security (InfoSec) team you will be instrumental in ensuring the performance, stability, and security for all of Core Scientific. You will traverse Blue & Red Team functions, solving challenges on both sides with code. Daily actions improve observability. You are instrumental in the InfoSec design review process as we vet new tools and services for implementation. You will also work closely across the aisle with the technology team as we ensure software developed in-house meets both our internal standards, as well as compliance obligations.

Reponsibilities

Ability to define, capture, and interpret product/system security requirements.

Drive Compliance (SOX, SOC, CIS, NIST) companywide.

Remain on top of current threat landscape.

Build, integrate, test, monitor and deploy InfoSec code.

Audit services for compliance.

Manage, track, and document changes to code.

Further Security as Code initiatives.

Partner to ensure secure, immutable infrastructure through infrastructure as code.

Maintain InfoSec's infrastructure, both on-prem as well as cloud.

Own Red Team Campaigns, Gamedays and Tabletop exercises.

Drive best practices across InfoSec as well as Core Scientific as a whole.

Be a thought leader and mentor within the company for junior/mid-level engineers.

Other duties as assigned.

Qualifications

5+ years' experience in DevOps and/or Infrastructure Engineering or equivalent experience as a Full Stack Software Developer, responsible for coding either/both application and infrastructure

5+ years of experience working with cloud architecture and services in multiple public clouds (Amazon Web Services, Microsoft Azure, Google Cloud Platform, or IBM Cloud)

5+ years of experience in automation of code deployment in both on premise environments and multiple cloud providers

5+ years' experience with software configuration management systems

5+ years' experience with virtualization and containerization architecture (Kubernetes)

Experience with build and release Management – GitHub, Apache, Make, Jenkins

Strong understanding of modern engineering practices including Scrum and Kanban

Basic networking knowledge: TCP/UDP, DHCP, DNS, routing and HTTP and systems architecture, including Unix, Linux (BSD, Arch, Ubuntu, Gentoo), OpenVMS, FlashCopy, HP/UX, Tru64

Deep understanding of agile and lean principles with demonstrable success in leading enterprise-level IT process re-engineering and transformational projects using a client focused consultative approach

Strong scripting skills (Python, Perl, Bash, Ansible, BASH, Terraform)

Understanding of Active Directory, Windows group policies, and Linux integration with Active Directory

Strong analytical and troubleshooting skills

Excellent communication and interpersonal skills

Work Environment

This job operates in a remote office and generally uses laptop computers and smartphones.

Physical Demands

While performing the duties of this job, the employee is frequently required to sit; stand; walk; use hands; and lift to 10 pounds.

Position Type/ Expected Hours of Work

This is a full-time, Monday – Friday position. You may be expected to work some weekends and after hours as work requires.

Travel

Minimal travel may be required.