Intuit is the global financial technology platform that powers prosperity for the people and communities we serve. With approximately 100 million customers worldwide using products such as TurboTax, Credit Karma, QuickBooks, and Mailchimp, we believe that everyone should have the opportunity to prosper. We never stop working to find new, innovative ways to make that possible.

Job Overview

Come join the "Intuit Core Security Engineering Team" as a "Senior Security Software Engineer". Our team is responsible for Intuit’s cloud production runtime security platform. The ideal candidate will join a team of motivated security and software engineers with a passion for solving cloud security problems through technology.

Responsibilities

80-95% security analysis and hands-on coding
Identify and define security abuse cases, ie techniques, tactics and procedures (TTPs)
Test for basic security escapes and develop detection algorithms
Continually research offensive security tools and exploits
Develops, deploys and operates security detection services for cloud environments, i.e. AWS and GCP
Understands and incorporates risk scoring methodology and prioritization
Ability to secure network and operating system for both on prem and cloud infrastructures
Ability to deploy intrusion detection and alerting at network and OS layer
Ability to perform basic incident response and forensics at network and OS layer
Works on significant assignments that are broad in scope and complexity, may cross several functional and organizational boundaries, and cover a wide range of issues
Exercises independent judgment in the selection of methods and techniques used to deliver operational solutions. Considers build, buy and partnering alternatives in the selection process
Experience with Agile Development, SCRUM, and/or Extreme Programming methodologies

Qualifications

3+ years in a computer security role, including experience in offensive security
3+ years working experience with security analysis of vulnerabilities/exploits. Implementing detection capabilities is a plus
Bachelor’s degree in computer science or equivalent work experience. Emphasis on Cybersecurity is a plus
Working experience with container technologies (Docker, Kubernetes, etc.).
Hands-on operations experience with cloud infrastructure and security tools (Host Intrusion, WAF, API Security, etc.).
Knowledge of red team methodologies
Software development experience with Python, Golang or Shell.
Strong grasp of AWS infrastructure tools and automation (infrastructure as code and operations). AWS security engineering experience is a plus.
An understanding of the Software Development Life Cycle (SDLC).
Machine Language development is a plus.
"Self-starter"" attitude and ability to make decisions independently.
Strong desire to learn and grow.
Excellent problem-solving skills with a history of superb delivery against assigned tasks.
Outstanding partnership skills.