Security & Compliance engineer

Your next adventure at VMware is only a click away! At VMware, we are committed to helping our people grow professionally. Our talented employees exemplify our shared values and continue to drive our company to new heights. If you see a position that might be right for you, we encourage you to apply and continue to be a part of our EPIC2 community. Job Description Summary The Cloud Platform Security team is looking for a Senior Compliance engineer for the compliance and certification team. This individual will be expected to drive the development and production of the guidance automation processes related to security and compliance. The individual will also be expected to drive certification programs such as NIAP, EAL4 etc. The guidance documentation comes in many forms: white papers that correlate security and compliance controls with VMware product capabilities, configuration guides that show step-by-step implementation guidance, audit guides that demonstrate how to provide artifacts and other evidence to demonstrate compliance with controls, and finally, a comprehensive guide that becomes the de facto gold standard per each compliance domain or regulation (PCI, ISO27001, NIST 800-53, HIPAA, etc.). This role will require working closely with additional engineering teams across VMware, architects, product managers and program managers in a highly collaborative environment. Skills and Qualifications A passion and prior experience with information security. Bachelors, Master's or PhD in Computer Science or related technical fields. 8+ years experience in systems software development. 2+ years of experience working with audit, security, or compliance topics. Familiarity with compliance regimes and security audit processes. Strong communication skills (conversational and writing). Knowledge in database and API integration a plus. VMware Certification, or other virtualization technology certifications strongly desired Duties and Responsibilities Understand security functional requirements and how the products provide these security functions. Drive design, development, and maintenance of automation for DISA STIG and other compliance standar. Knowledge of at least one compliance domain/regulation: PCI, HIPAA, NIST 800-53, ISO27001 Align against goals, roadmap, commitments and collaborate with stakeholders to effectively deliver high quality features, controls, and guidance. Support security assessments and audits as required. This role is not an audit role nor a software development role. This unique role will focus on collaborating with multiple stakeholders to drive consistent security designs and standardize compliance mappings. Our customers depend on us to help enhance their SDDC solutions and you will be a leader along our cybersecurity journey. The role will be in constant contact with product managers to track and update security capabilities in the knowledge database. The DB is a differentiator for our team as we use this data to drive consistent security postures across products. The role will work closely with engineering to assist in compliance mappings between product capabilities and specific controls (PCI, NIST 800-53, ISO27001, and so forth). This role will also manage the relationship with an external auditor to publish whitepapers that are focused on security capabilities within each product. Extract content from compliance database and proprietary content management system Develop guidance to validate controls by explaining a technical concept for an IT audit audience Assess future documentation needs and identify process improvement opportunities Track progress in JIRA to maintain user stories of work assigned through to completion Category : Engineering and Technology Subcategory: Quality Engineering Experience: Manager and Professional Full Time/ Part Time: Full Time Posted Date: 2022-06-21 VMware Company Overview: At VMware, we believe that software has the power to unlock new opportunities for people and our planet. We look beyond the barriers of compromise to engineer new ways to make technologies work together seamlessly. Our cloud, mobility, and security software form a flexible, consistent digital foundation for securely delivering the apps, services and experiences that are transforming business innovation around the globe. At the core of what we do are our people who deeply value execution, passion, integrity, customers, and community. Shape what’s possible today at http://careers.vmware.com. Equal Employment Opportunity Statement: VMware is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind: VMware is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at VMware are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. VMware will not tolerate discrimination or harassment based on any of these characteristics. VMware encourages applicants of all ages. Vmware will provide reasonable accommodation to employees who have protected disabilities consistent with local law.