Principal Security Engineer Cover Letter

I am excited to be applying for the position of principal security engineer. Please accept this letter and the attached resume as my interest in this position.

In my previous role, I was responsible for security Consulting services to McKesson IT and other Business Units to assist in achieving their IT security objectives including regulatory and framework audits, security control implementation, security event management and general security posture.

Please consider my experience and qualifications for this position:

• A strong background in supporting multi-vendor, multi cluster Firewall platforms, that support a diverse set of products and a geographically disparate workforce
• Experience in the automation of manual tasks and seeking out efficiencies
• Hands-on expertise in devops
• Hands-on expertise in network security development or operations, at levels
• Experience with developing solutions against new controls specific to with Government standards including FedRamp, DOD SRG, PCI, SOC, ISO
• Familiarity with development and scripting languages such as Java, C, Python, or Perl
• Knowledge in current vulnerabilities, attack vectors, and defensive strategies
• Experience with phishing/email protection technologies

I submit this application to express my sincere interest in the principal security engineer position.

Previously, I was responsible for audio visual and command, control, communications and computer IT (C4IT) technical guidance for assigned military construction (MILCON) projects starting with the planning process through to systems’ installation (7 year MILCON project cycle).

I reviewed the requirements of the job opening and I believe my candidacy is an excellent fit for this position. Some of the key requirements that I have extensive experience with include:

• Served as a cloud security SME for high visibility cloud initiatives
• Created security reference architecture for multi-tenant cloud initiatives
• Have knowledge of cloud computing (preferably AWS) operations and how to secure them
• Have experience in secure development especially in large, complex system environments
• Deep knowledge of cloud operational models and secure SaaS architecture in a world of containerized microservices
• Subject matter expertise in multiple domains, including cloud security, web security, mobile security, AuthN/Authz protocols (SAML, JWT, OAuth, OpenID, Ping, Okta, ) and infrastructure security (Chef/Puppet)
• Experience in applying security to cloud technologies (Managing secrets, Securing CD pipeline, Secure Infrastructure as Code, Container Security)
• Knowledge of primary AWS services (EC2, ELB, RDS, Route53, S3, Lambda) and IAM implementation

I submit this application to express my sincere interest in the principal security engineer position.

In my previous role, I was responsible for local IT support activities like audit support, IT equipment room ownership (including access control), and CMDB audit support.

Please consider my qualifications and experience:

• Knowledge of (Web) Application Security and/or Threat Intel (TI) topics
• Service Provider level knowledge of the networking concepts and Layer 3 routing such as BGP, MPLS and IS-IS
• Extensive experience using Python and shell scripting for administration, monitoring and automation (or equivalent)
• Familiarity with Juniper SRX, Cisco ASA or F5 AFM firewalls
• Service Provider level knowledge of Data Center security architectures with DNS, NFV and SDN
• Regularly attend Security Industry conferences such as M3AAWG, Defcon, ShmooCon, Derbycon, Blackhat, or B-Sides
• Extensive experience in Unix/Linux environments
• Certifications such as, CCIE, CISSP, and CISM

I am excited to be applying for the position of principal security engineer. Please accept this letter and the attached resume as my interest in this position.

Previously, I was responsible for leading control system engineering technical expertise to assist with Site/Asset and Functional managed projects that are associated Control Systems.

Please consider my experience and qualifications for this position:

• Develop and maintain possible threat use cases that will be used in research, analysis, assessments, and testing
• Recognize and safely utilize mobile and cloud security tools, tactics, and procedures
• Communicate status of research, analysis, and assessments activities to management
• Solid understanding of major operating systems, mobile device management, mobile application management, mobile application development, cloud security authentication, authorization, cloud compliance, cloud data protection, cloud application protection, infrastructure as a service (IaaS), network as a service, storage as a service, active directory, and associated mobile and cloud infrastructure components
• CISSP recommended
• Solid understanding of object oriented design, design patterns using C++ /Java/Go and in building cloud applications
• Strong system management experience (Network management, Systems management, Datacenter automation)
• Experience in application of structured methodologies, notations and approaches, to define and organize systems for optimal security

In response to your job posting for principal security engineer, I am including this letter and my resume for your review.

In the previous role, I was responsible for advisory Services For IT Controls in multiple projects, teams, and audits through ensuring consistent control implementation by providing a mechanism for identifying control requirements prior to their implementation into production IT environments.

Please consider my qualifications and experience:

• Knowledge of the Security Development Lifecycle (SDL)
• Solid understandings of network and systems security, cloud security
• Knowledge of enterprise level SIEM or log management systems
• Applicants should have a strong interest in computers and IT capabilities
• Define and design security code analysis tools, frameworks, and libraries
• Expert knowledge of information security principles, web applications and a level of familiarity with tactics, techniques, and procedures of malicious actors
• Prior experience with programming in server-side technologies such as .NET and/or Java
• Web-application security, Linux/Windows system security