M&A Security Engineer, Contract To Hire

Overview of 66degrees

66degrees is a leading consulting and professional services company specializing in developing AI-focused, data-led solutions leveraging the latest advancements in cloud technology. With our unmatched engineering capabilities and vast industry experience, we help the world's leading brands transform their business challenges into opportunities and shape the future of work.

Overview of Role

A client of 66degrees’ is seeking a consultant to engage on a 6 month remote contract with the potential to convert. The Information Security M&A Engineer is responsible for supporting client’s merger and acquisition activity throughout the due diligence and integration processes. The role reports to the Security Vulnerability Manager and functions as a member of the Information Security team with a dotted line to the M&A Integration leadership team. Interacts with internal and external technical and business units to perform Information Security risk assessments, drive Information Security related technology integration activities and ensure alignment of integration activities with security strategy. This is a hands-on technical role.

***Hybrid role in Chicago, IL after FTE conversion and MUST have worked on merger and acquisition activity.***

Key Responsibilities

• Protect the integrity and confidentiality of data and infrastructure while enabling business functionality in all systems and environments by supporting applicable security solutions.

• Partner with stakeholders to conduct pre-deal close security review and breach analysis of acquisition environment​.

• Perform acquisition firewall rule reviews to ensure high-risk protocols are configured appropriately.

• Perform technical risk assessments and present accurate and comprehensive reports for both non- technical and technical audiences.

• Participate in the integration and Solution Design meetings to plan secure system integration solutions following Policies and Standards.

• Perform static and dynamic code analysis of in-house developed applications.

• Review applications for security posture and provide improvement recommendations.

• Implement the suite of Information Security tools post-close.

• Facilitate the adoption of new tools and processes in the M&A playbook.

• Act as a liaison between acquired business units and corporate stakeholders for incident response activities for M&A related security incidents.

• Gather and report on key organizational information security metrics.

• Other duties as assigned.

Required Skills and Experience

• Bachelor’s degree Information Security, Computer Sciences or an equivalent combination of education and experience.

• Related certifications (e.g., GSEC, CISSP, AWS) preferred.

• At least 3 years’ experience in an Information Security role and 3 years’ experience in an IT capacity with progressively difficult responsibilities.

• At least 2 years’ experience in mergers and acquisitions.

• Solid experience working with Windows, Active Directory, Linux and O365.

• Experience with Amazon Web Services and/or Microsoft Azure.

• Working knowledge of networking protocols and concepts including TCP, DNS, DHCP, Firewalls, VPN, EDR, and Web proxies.

• Understanding of email transmission, routing, and authentication concepts including SMTP, SPF, DKIM, and DMARC.

• Experience with vulnerability assessments and patch management practices.

• Knowledge of Windows Event and network device logging including syslog and SIEM.

• Solid analytical and problem-solving skills; ability to think strategically and drive decision making.

• Ability to evaluate business processes, IT technology, identify security risks, process gaps, and evaluate IT controls.

• Organizational skills to prioritize risks and actions using a risk-based approach.

• Experience working with industry security standards, guidelines, and regulatory/compliance requirements related to information security such as ISO 27001, NIST 800-53, SOC2, PCI, SOX, etc.

• Excellent communication skills (both written and verbal)

• Competent interpersonal skills, demonstrating executive presence and the ability to interact with senior business and technology leaders with credibility

• Ability to handle multiple tasks concurrently, priorities them according to the change in situation and meet deadlines.

66degrees is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to actual or perceived race, color, religion, sex, gender, gender identity, national origin, age, weight, height, marital status, sexual orientation, veteran status, disability status or other legally protected class.