Lead Security Solutions Engineer

Who are we hiring? The Lead Security Solutions Engineer is a member of the Information Technology Security organization leading the efforts around IT Security services design, solution selection and configuration, technology delivery and long-term platform evolution. This technology thought leader has a history of developing complex technical security capabilities and automation which enables the organization to efficiently implement the controls, governance and protection that is needed to ensure the company’s assets are secure. This outcomes-oriented person is both a security specialist having worked with a wide variety of security related technologies but is also a broad technologist with experience in infrastructure, public cloud, hosted applications and working with managed services providers. The senior engineer should also have experience with various application architectures and frameworks able to efficiently translate application related requirements and outcomes to the security service catalog and capabilities. From working on solutions for leading professional sports teams to building capabilities for some of the world’s most renown entertainment venues, the Security Solutions Engineer will play a critical role in influencing the technical direction of the Madison Square Garden Company and protecting its digital interests. What will you do? Working closely with the head of Technology Security and other leaders, will be responsible for the evaluation of existing and future security solutions inclusive of hardware, software, and services. As a lead member of a cross-functional infrastructure team (digital, application, workplace, network, storage, compute, applications), establishes technical security strategies and standards for digital applications and infrastructure technology. Leads in the design, implementation and support of security frameworks and capabilities across multiple infrastructure ecosystems, including Cloud, On-prem and hybrid. Leads cross-functional teams to create and maintain security guidance, including Baselines, Reference Architectures, Control Procedures and Design Patterns. Leads the specification, validation and design efforts for security products and services – this includes methods of selection, evaluation, configuration approaches and full lifecycle delivery. Responsible for designing the technology implementation and delivery approach that expands past just the product aspect but includes training operations, documentation, updating the knowledge base and providing post implementation support. Leads as the L3 escalation point for operational issues and security incidents – this is “roll up your sleeves” role who will need to be accepting of some operational responsibilities as the need arises. Leads and executes tasks associated with technical audits and compliance reviews – should be able and willing to engage with all governance functions on a constructive basis. Responsible for creating & enhancing security requirements for Endpoint Detection & Response and workplace programs, with an emphasis on requirements, design, use cases, vendor selection and management. Analyzes & designs security use cases/scenarios for current and future application platforms hosted in 3rd Party Data Centers, Azure & AWS. Performs Risk Assessments and IT Security reviews to assess business risks within the current operating model. Curates and evolves the Security services and product catalog – ensures each service is well defined, has application services levels defined and is marketed to key stakeholders. Builds business cases and storyboards explaining and justifying spend and technical decisions – works closely with the operations team to ensure alignment on direction and decisions. Responsible for the technical development of recovery and business continuity plans – ensures that regardless of incident the security infrastructure can survive system shocks and external or internal events. Works closely with Security Architecture and other Technology leaders to define, market and implement the 3 to 5-year technology roadmap inclusive of the security technology platform. Drives hyper-automation into all security products and services ensuring minimal human engagement is necessary to deliver desired outcomes. Leverages partners, cloud services and other resources to lead with an “automation first – cloud first” mentality. Evaluates capabilities and features to identify gaps against our security standards and drive security gap resolution. What do you need to succeed? Undergraduate degree in Computer Science or Engineering MS in Cybersecurity preferred Minimum 5-years-experience working with the market leading cloud providers which MSG has defined as Amazon AWS, Microsoft Azure and Google Cloud. Minimum 5-years-experience of security engineering experience inclusive of application, digital, end point management, cloud security, network segmentation, firewall and forensics tool sets. Minimum 5-years-experience operationalizing security services and technologies – must have focused operational experience. Minimum 5-years of integration experience – hands on keyboard experience developing integrated technologies with authentication and authorization platforms, scheduling platforms, and enabling on-prem and off-prem systems to work together. Preferred knowledge of Security Development Lifecycle experience. Preferred experience producing technical documentation. Preferred experience with building pipelines in Azure DevOps and/or GitHub. Preferred product experience includes WhiteHat Sentinel, Signal Sciences, Burpsuite, Palo Alto Firewalls SUPERVISION: Position is that of an individual contributor but may be asked to lead matrixed project teams. The Company requires that all individuals, subject to certain limited exceptions, be fully vaccinated against COVID-19. The Company will consider requests for reasonable accommodations regarding this requirement. Why is MSG for me? About Madison Square Garden Entertainment Corp. Madison Square Garden Entertainment Corp. (MSG Entertainment) is a leader in live entertainment. The Company presents or hosts a broad array of events in its diverse collection of venues: New York’s Madison Square Garden, Hulu Theater at Madison Square Garden, Radio City Music Hall and Beacon Theatre; and The Chicago Theatre. MSG Entertainment is also building a new state-of-the-art venue in Las Vegas, MSG Sphere at The Venetian. In addition, the Company features the original production – the Christmas Spectacular Starring the Radio City Rockettes – and through Boston Calling Events, produces the Boston Calling Music Festival. The Company’s two regional sports and entertainment networks, MSG Network and MSG+, deliver a wide range of live sports content and other programming. Also under the MSG Entertainment umbrella is Tao Group Hospitality, with entertainment dining and nightlife brands including: Tao, Marquee, Lavo, Beauty & Essex, Cathédrale, Hakkasan and Omnia. More information is available at www.msgentertainment.com. We invite you to create an exceptional career at MSG Candidates who have completed 60 credits of college-level coursework (representing 2 years), or have shown similar self-development through certifications, trade school coursework, etc. are preferred. We value diversity and are looking for extraordinary employees of all backgrounds At MSG we value diversity and are looking for extraordinary employees of all backgrounds! MSG is an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, sexual and reproductive health choices, national origin, citizenship, age, genetic information, disability, or veteran status. In addition to federal law mandates, MSG complies with all applicable state and local laws governing nondiscrimination in all locations and will consider requests for reasonable accommodations as required.