Security Engineer (EU Remote)

About the role

At Gurobi Optimization, we're on a mission!

A mission that focuses on mathematical optimization. We empower our customers to expand their use of mathematical optimization technology in order to make smarter decisions and solve some of the world's toughest and most impactful business problems. We're looking for passionate, dedicated, innovative game-changers to join our team and drive the future of Gurobi.

As a Security Engineer at Gurobi Optimization, you will offer direct security support for both infrastructure and end-user systems and services. Our workplace primarily uses macOS endpoints, and our infrastructure includes cloud environments (AWS, Azure, GCP) and a Colo datacenter. Our employees are spread out in 16 countries around the world, so although the company is small, our security needs are complex.

What will you be doing? -

AI Governance

-

-

Monitor developments in artificial intelligence and cybersecurity to identify emerging risks and opportunities for improving security controls.

-

Utilize CrowdStrike and related security platforms to collaboratively identify, monitor, and mitigate risks associated with the use of AI applications and services.

-

Work with the team to audit and update the configuration of AI platforms to adapt to evolving data leakage and similar threats.

-

AWS/Colo

-

-

Manage configuration and updates to critical security systems such as firewall and network.

-

Certificate deployment, renewal, and management through Infrastructure as Code (IaC)

-

Office365

-

Suggest, review and help implement highly secure configuration standards.

-

Enhance and oversee Phishing/Virus Detection and response measures.

-

Assess and deploy features to enhance security for end-user accounts and services.

-

Vendor Security Assessments

-

-

Assist with assessments from customers interested in Gurobi products.

-

Audit Observations

-

-

Review audit findings and collaborate on implementing necessary changes in response.

-

Assist in upcoming certification efforts.

-

Vulnerability Management

-

-

Conduct Port Scanning and Perimeter Scanning to identify vulnerabilities.

-

Assist with patch reporting and enforcement for laptops, servers, and virtual machines.

-

3rd Party Apps Review/Assessment

-

-

Assess requests for new 3rd party applications, ensuring vendor compliance with our safety and security standards.