Overview

Enterprise Holdings is the world’s largest car rental operator and an industry leader in mobility and technology. We’re one of the top global travel companies, ranking ahead of many airlines and most cruise lines and hotels. And no matter what transportation challenges our customers face, we have an innovative solution.

We operate the Enterprise Rent-A-Car National Car Rental and Alamo Rent A Car brands via more than 9,500 fully staffed neighborhood and airport offices, including franchisee branches, in nearly 100 countries and territories.

Through this robust global network, we operate a fleet of nearly 1.7 million vehicles and provide a comprehensive portfolio of transportation solutions, including car rental, carsharing, vanpooling, car sales, truck rental, vehicle-subscription and affiliated fleet management services. As a total mobility provider, we serve the needs of a wide variety of customers, businesses, government agencies and organizations every day.

At the center of it all, our dedicated IT teams innovate, design and develop the technology that is redefining how customers rent, buy and share vehicles from our family of brands. Here, you will be part of a diverse and talented team that creates and delivers powerful technology solutions for our customers and employees across the world with the resources and support to develop in a variety of career paths.

As you are considering a position with Enterprise Holdings, we invite you to learn more about our business. Today – and every day – the safety and wellbeing of employees, customers and the communities we serve is our top priority. For the latest on our COVID-19 response, please click here.

As an Enterprise employee, we offer an excellent package with market-competitive pay, comprehensive healthcare packages, 401k matching & profit sharing, schedule flexibility, work from home opportunities, paid time off, and organizational growth potential.

This position is open to candidates who wish to work from home (WFH). Employees who choose virtual / remote work should have an adequate space to serve as their home office.  #LI-REMOTE

 Responsibilities

The Information Security Office Pen Test Team is looking for a Security Engineer 2 to join the team responsible for performing security evaluations based on threat intelligence.

In this role you will be responsible for analyzing tactics and techniques used by threat actors, testing company defenses to measure performance and identify weaknesses.  The successful candidate will be agile, highly analytical, and proactive - someone who is committed to staying current on security and technology advancements and trends. 

Key Responsibilities:

Define and document test plans that emulate threat events to evaluate the effectiveness of security controls

Collaborate with others in the department and across IT to execute security controls testing, and document/ analyze results to identify areas of opportunity to increase the effectiveness of security controls

Monitor and analyze industry threat intelligence sources such as MITRE and CIS

Understand methods to identify cyber threats, recognizing and categorizing types of vulnerabilities and mimicking threat behaviors

Analyze and provide guidance to help others understand the relationships between threats, gaps and impacts in system and application security

Compose and deliver reports and summaries for varying audiences, and prepare/ deliver presentations to own team, department, and other IT teams

Protect our customers, our employees, and our brands by incorporating security and compliance in all decisions and daily job responsibilities; follow security policies and procedures and continuously identify and recommend opportunities for improving security

Equal Opportunity Employer/Disability/Veterans

Qualifications

Required:

Must be presently authorized to work in the U.S. without a requirement for work authorization sponsorship by our company for this position now or in the future

3+ years of related experience (can include any combination of experience in Information Technology and Information Security)

3+ years of experience in Information Security, including knowledge of cloud computing technology

Scripting automation or application programming experience

Proficiency with Microsoft Office applications including Outlook, Word, PowerPoint, and Excel

Ability to quickly triage problems, determine root cause and drive resolution

Excellent problem solving and analytical skills, the ability to define problems, collect data, establish facts, and draw valid conclusions

Ability to be flexible and adaptable to changing requirements and responsibilities and deliver high quality results

Must be able to work independently with a sense of ownership to accomplish department and project tasks

Must have strong time management and organization skills, partnered with strong attention to detail

Must be committed to incorporating security into all decisions and daily job responsibilities

Preferred:

Bachelor's degree in Computer Science, Computer Information Systems, Management Information Systems, or related field preferred

Preferred experience with Windows, Linux, APIs, and Cloud environments

Preferred experience with adversarial tactics and techniques including but not limited to the MITRE ATT&CK knowledge base

Preferred experience of network and application security tools such as Nexpose, Metasploit, Burp Suite, Cobalt Strike, Core Impact, and Kali Linux

Preferred experience conducting network, web/mobile applications, and API penetration tests

Preferred security related certifications such as CISSP, GPEN, Pen Test+, or OSCP

Experience with scripting languages such as PowerShell, Python, or ZSH

Preferred understanding of security industry standards such as ISO 27001/2 and NIST security standards

Functional knowledge of productivity, documentation, and collaboration tools such as SharePoint, Jira, Confluence, and Jive