Senior Cyber Security Engineer - Automation, Data Center & Networking Security

<p>Latitude AI (<a href="http://lat.ai">lat.ai</a>) is building the future of Ford’s autonomy roadmap to make travel safer, less stressful, and more enjoyable for everyone. Bringing this vision to scale, our fully in-house developed hands-free ADAS platform will debut on Ford’s all-new Universal Electric Vehicle in 2027. </p> <p>When you join the Latitude team, you’ll work alongside leading experts across machine learning and robotics, cloud platforms, mapping, sensors and compute systems, test operations, systems and safety engineering – <strong><em>all dedicated to redefining the relationship between people and their vehicles for millions of customers.</em></strong></p> <p>As a Ford Motor Company subsidiary, we operate independently to develop automated driving technology at the speed of a technology startup. Latitude is headquartered in Pittsburgh with engineering centers in Dearborn, Mich., and Palo Alto, Calif.</p> <p><span style="font-family: arial, helvetica, sans-serif;"><strong>Meet the team:</strong></span></p> <p>The Enterprise Cyber Security team is focused on ensuring the resilience of our corporate environment with focus on protection of our corporate systems, IP, and employee data. We are a close-knit team with strong cross-functional roles in the company.</p> <p>As a Cyber Security Engineer, you will be the hands-on technical lead securing our High Performance Computing (HPC)/Virtualization environments. Your job is to have a deep understanding of this infrastructure, network architecture, and the operations depending on it, including our software/hardware/network engineering, fleet operations requirements, and administrative functions. You will use your knowledge and experience to design, implement, automate, and continuously improve our security posture. </p> <p><span style="font-family: arial, helvetica, sans-serif;"><strong>What you’ll do: </strong></span></p> <ul> <li>Plan for, execute, and follow through on projects and engagements independently</li> <li>Apply best practices in software, network, and infrastructure engineering</li> <li>Deliver projects on time, on budget, with excellent quality and security configurations</li> <li>Review the existing and new deployments and architecture designs looking for design flaws, security improvements, and advocate for stronger security controls that meet functional and operational needs</li> <li>Work hand-in-hand with the Cloud Platform, IT, and Product teams to research, design and develop security solutions and deployments and strategies tailored to Latitude’s business needs</li> <li>Engage actively in Data Center and Network Security initiatives to assess existing security and implementations of supplemental technical solutions to improve security </li> <li>Document findings, conduct comparisons, perform threat and risk assessments, and Proof of Concepts aiding the team in making informed decisions about the impact of various design options</li> <li>Develop, Review, and Design the automation and orchestration for security aspects of cloud and virtualized deployments</li> <li>Provide inputs into dashboards and report metrics on the status of the Cyber Security posture</li> <li>Hands on deployment of solutions, working independently and as part of a team</li> <li>Provide mentoring and skill set knowledge transfer to team members and engineering staff</li> <li>Moderate and contribute to Supercomputing System Administration that contributes to:</li> <ul> <li>Proactive monitoring, analysis, and correcting system security issues</li> <li>Development of scripts to automate, perform security checks, and develop tools to enhance support of the Cloud/Virtualized systems and development environments</li> </ul> <li>Developing playbooks/runbooks, operational and troubleshooting documentation</li> <li>Evaluate and contribute to designs for Network and Infrastructure Solutions with Security and Functionality as pillars of implementation</li> <li>Consult and advocate security best practices for DMZ architectures, NAC/NAP, lateral isolation, and multi-site data movement in Network management tooling (like Palo Alto, Fortinet, F5)</li> </ul> <p><span style="font-family: arial, helvetica, sans-serif;"><strong>What you'll need to succeed:</strong></span></p> <ul> <li>At a minimum, a Bachelor's degree in Computer Engineering, Computer Science, Cyber Security or a related field and 4+ years of relevant experience (or Master's degree and 2+ years of relevant experience)</li> <li>Strongly prefer 8+ years related experience or 6 years with a Master’s degree; as a Data Center/Virtualization and/or Network Security Architect/Engineer</li> <li>2+ years of related experience in vulnerability management and adjusting the risk rating/severity dependent on internal factors for cloud and other infra</li> <li>High proficiency and Hands-on experience in cloud/virtualization technologies (AWS/HPC/MAAS)</li> <li>Experience with Lustre, Kerberos, and Linux Administration</li> <li>Proficiency in scripting languages, including Bash, Python, Go, or Java to create production level services and automation tools that incorporate into CI/CD</li> <li>Proficiency and hands-on experience using Infrastructure as Code (IaC) to automate the creation of cloud resources, virtualized systems, and review infrastructure deployments. E.g. Terraform, Cloud Formation, Ansible, or others</li> <li>Ability to grasp new technologies quickly and prioritize and multitask on multiple responsibilities</li> <li>Hands-on Experience with patching and hardening Linux, MacOS, and Windows Systems (clients and servers), images, and containers</li> <li>Proficient in Network Protocols and Firewall Management, with hands-on experience in configuration and optimization to ensure network security internally and at perimeters</li> <li>Critical thinking and a holistic view of Cyber Security with ability to balance security requirements with mission needs and collaboration across teams</li> <li>Exceptional organizational and time management skills demonstrated through adept autonomy, independent work, collaborative teamwork, and a professional demeanor</li> <li>Strong experience with architecting/deploying scalable security services and workloads in cloud native and virtualized environments</li> <li>Strong experience with securing distributed applications and clustered compute workloads running on CPUs, GPUs, and TPUs</li> <li>Understand engineering design limitations and provide guidance for teams to secure their deployments to achieve desired performance in budget and on time</li> <li>An Independent take-charge attitude while being open-minded, creatively thinking, willing to take calculated risks, and make informed decisions</li> <li>Strong understanding of Cyber Security Standards (ISO27001, NIST 800-53)</li> <li>Experience with Jenkins a plus</li> <li>Experience with Zero Trust Architecture (ZTA) principles and implementations</li> <li>Exposure to data governance, secure data movement, and storage lifecycle management</li> <li>Must have demonstrated proficiency and strength in verbal, written, presentation, and communications skills, including technical diagramming</li> <li>A sense of cama