At Moody's, we unite the brightest minds to turn today’s risks into tomorrow’s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are-with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. 

If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity. 

Moody’s is looking for a Senior Cyber Security Engineer to join its growing Cyber Security organization. This is a fun and challenging position requiring deep knowledge of security and network products and concepts with an emphasis on securing PKI environments and using Certificate Lifecycle Management tools. The candidate should be motivated and willing to take on challenges, able to multi-task to succeed and can work independently and with minimal oversight.

The Cybersecurity team is globally responsible for helping the organization balance risk by aligning policies and procedures with Moody’s business and regulatory requirements. The team is responsible for the development, enforcement and monitoring of security controls, policies and procedures, disaster recovery programs, GRC (Governance, Risk and Compliance) reporting and the delivery of security services including the company’s Cyber Security program.

Functional Responsibilities

• Support successful delivery of Information Security projects and services for our customers by working directly with key business stakeholders and technology SMEs.
• Provide engineering and operational support for network security products and services (new deployments, hardware refresh/upgrades, migrations, and feature implementation).
• Support the evaluation of security concerns with new and emerging technologies with particular focus on PKI Infrastructure and design.
• Mentor and guide other teams in the organization on network security best practices and implement best in class support of an enterprise PKI design.
• Assist with creating security designs and configure security Controls within the existing PKI environment, plus helping to create a new one to migrate onto.
• Develop, collect, and mature security metrics for IT Risk programs.

Qualifications

• BS or BA degree or relevant certifications, preferably in Information Systems, Computer Science, Computer Engineering or equivalent
• 3-5 years of solid, diverse work experience in the IT industry, including experience in Network, or Security Engineering technologies
  • PKI (MSFT or Venafi preferred)
  • Certificate Lifecycle Management tools (Venafi Preferred)
  • Microsoft CA
  • DNS
  • SIEM tools, i.e. Splunk
• 3-5 years of experience in at least one of the following Security domains; Application, Endpoint or Network security
• Working knowledge of DNS, PKI
• Working knowledge of network topologies and IP schemas.

Key Competencies

• Ability to think with a security mindset. The successful candidate has a strong IT background within depth knowledge of several key security practice area: access control; network security; authentication flows; security strategy
• Adaptability and flexibility to work on a variety of assignments as defined by constantly evolving priorities.
• Knowledge of Active Directory, Authentication/Authorization protocols.
• Technical expertise (design and/or implementation) with PKI Infrastructure.
• Technical expertise with Certificate Lifecycle Management tools.
• Maturing processes through a ticketing system to automate tasks.
• Building and maintaining a world class enterprise PKI solution.
• Solid understanding of network and security concepts, including PKI and DNS
• Ability to quickly assimilate new technologies, tools, internal/external systems and design frameworks. Strong and broad technology background.
• Excellent written and oral communication skills including the ability to interact directly with customers that do not have an IT background.

Moody’s is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity or any other characteristic protected by law.

Candidates for Moody's Corporation may be asked to disclose securities holdings pursuant to Moody’s Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy, including remediation of positions in those holdings as necessary.