Job Description

At World Fuel Services, our employees are the key to our global success.We are industry leaders due to the innumerable talents of our approximately 5000- strong professional team. Our people thrive in an entrepreneurial and culturally-diverse environment, where innovative thinking, collaboration and efficient execution are highly valued. Our high-performance culture is what allows us to drive sustained growth. Stronger together, we promote an environment where individuals can thrive.


When you click 'Apply', you will need to click on 'Create Account'. By creating an account, you will be able to view your applications and their statuses. Your password must contain 1 upper case letter, 1 number, and 1 special character.

World Fuel Services, is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.

Job Description

This role will report to the Senior Manager of CyberSecurity. As a senior member of the CyberOps team and in partnership with other WFS business and infrastructure teams, the Senior Security Operations Engineer is a multi-function role with responsibilities that fall into two primary categories: solution engineering and incident response. This role leads engineering efforts focused on implementing and operationalizing WFS InfoSec policy and compliance requirements across supported on-prem and cloud infrastructure. Additionally, this role will lead, or provide guidance, for detection and response activities coordinating mitigation and remediation activities, as required.

Essential Functions

* Engage as SME in the design, implementation, and operationalization of cybersecurity tools and initiatives in adherence to NIST Framework, PCI and other standards as defined by World Fuel Services InfoSec, certification and risk compliance policies and requirements.

* Participate in the delivery of BAU cybersecurity operations to include vulnerability and threat identification, incident detection and response and forensic investigations. Lead affected infrastructure groups in mitigation and remediation efforts.

* Lead security-related projects including planning, research, testing, and implementation. Work with IT and other IS staff to establish and enforce security best practices, protection objectives, and process improvements. Plan for security within project and application lifecycle development and implementation.

* Review and make recommendations regarding on-prem, datacenter and cloud infrastructure, networking and security settings and posture with a focus on AWS and Azure/M365 services.

* Implement and maintain on-prem, datacenter and cloud cybersecurity monitoring solutions through native tools, third party tools and custom API integration to extend monitoring and response capabilities into those environments.

* Create and maintain key metrics that are indicative of the security posture of the WFS infrastructure and respond readiness.

* Keep abreast of threat intelligence feeds to stay abreast of industry reports and emerging threat that may affect WFS.

* Support any LOD-2 initiatives, as required.

* Participate in the creation of security awareness and training efforts.

* All other duties as assigned or directed.

Education, Experience, and Skills required

* 10+ years of experience in network and systems engineer with a focus on cybersecurity solutions

* 5+ years of experience as a SOC or Forensic analyst or equivalent experience supporting cybersecurity incident response.

* 2+ years of experience with cloud infrastructure, networking and security, preferably with AWS and Azure. Platform certification are a plus.

* Bachelors degree in computer science, Information Technology or related field or equivalent work experience

* Experience fostering and building a collaborative working relationship with a team and various key stakeholders and be able to show progressive responsibility in cross team management of engineering projects of a critical nature.

* Experience with engineering and response automation utilizing a variety of APIs, scripting languages or commercial orchestration tools.

* Experience with deploying and maintaining security solutions including, but not limited to, SIEMs (Splunk, Alienvault, Helix), endpoint protection (enterprise level anti-virus, anti-malware), vulnerability management (Nessus, Qualys) and network/system level Intrusion Detection and Prevention (Tripwire, OSSEC, Snort, TippingPoint, Palo Alto, Checkpoint, Fortinet).

* Comfortable with network/pcap analysis, log analysis, TCP/IP concepts, various application, network and routing protocols and various operating systems.

* Communicates clearly with technical and business owners.

* Experience with creating and reviewing workflow processes and technical documentation.

* Comfortable with mentoring other team members, providing guidance and direction during incident response and engineering efforts.

* Familiarity with regulations and frameworks such as NIST, PCI, SOC, HIPAA, SSAE 16/SOC 1, SOC 2, ISO 17799/27002

* Relevant industry certifications (i.e. CISSP, Security+, ISA, CISA) or a bachelors degree in a cybersecurity related field.

* IND123