About Us
RB Global (NYSE: RBA) (TSX: RBA) is a leading, omnichannel marketplace that provides value-added insights, services and transaction solutions for buyers and sellers of commercial assets and vehicles worldwide. Through its auction sites in 13 countries and digital platform, RB Global serves customers in more than 170 countries across a variety of asset classes, including automotive, commercial transportation, construction, government surplus, lifting and material handling, energy, mining and agriculture.
The company’s marketplace brands include Ritchie Bros., the world’s largest auctioneer of commercial assets and vehicles offering online bidding, and IAA, a leading global digital marketplace connecting vehicle buyers and sellers. RB Global’s portfolio of brands also includes Rouse Services, which provides a complete end-to-end asset management, data-driven intelligence and performance benchmarking system; SmartEquip, an innovative technology platform that supports customers’ management of the equipment lifecycle and integrates parts procurement with both OEMs and dealers; Xcira, a leader in live simulcast auction technologies; and Veritread, an online marketplace for heavy haul transport.
About The Team
As a global company, our corporate teams support billions of dollars in equipment sales every year.
In joining our corporate services teams, you will be ensuring the business runs smoothly in your respective verticals and supporting the overall business to achieve our core objectives.
Every day your work will make a difference in the way we run our business and the in the way customers interact with us.
Job Description
The Cyber Security Engineer is responsible for planning, implementing, managing, monitoring, and upgrading security measures for Ritchie Brothers, Inc. The Engineer will work in collaboration with other internal departments and teams, especially the SOC team, on system and security breaches as well as testing and identifying areas of vulnerabilities.
Responsibilities
- Responsible for planning, implementing, managing, monitoring, and upgrading security measures for the protection of the organization's data, systems, and networks.
- Troubleshoots various Information System and cyber security software and data privacy issues and collaborates with the SOC team on these issues.
- Conducts security assessments of systems and applications using penetration tests, ethical hacking tools and risk assessment/mediation methodologies to evaluate vulnerabilities.
- Develops, tests and validates solutions to remediate exploitable conditions on devices such as web servers, mail servers, routers, firewalls and intrusion detection systems
- Evaluates, codes and implements software fixes (patches) to address system vulnerabilities such as malicious code (e.g., viruses), system exploitation using SQL injection, cross-site scripting, buffer overflows, parameter tampering, hidden field manipulation, cookie poisoning and web services manipulation
- Makes recommendations to correct vulnerabilities and ensures the organizations data and infrastructure are protected by enabling the appropriate security controls.
- Participates in the change management process.
- Performs other duties as assigned.
Qualifications
- 5-8 years of work experience with maturing organization security posture, security engineering
- Experience with enterprise grade security products and vendor
- Proficiency in SIEM automation and developing of use case for SOC team
- Ability to prioritize work and deliver solutions
- Strong attention to detail with an analytical mind and outstanding problem-solving skills.
- Great awareness of cybersecurity trends and hacking techniques.
- Display an excellent understanding of technology infrastructures using Firewalls, VPN, Data Loss Prevention, IDS/IPS, Web-Proxy, and Security Audits.
- Comfortable working with a variety of technologies, security problems, and troubleshooting of enterprise size problems.
EEOC
Ritchie Bros. is an equal opportunity employer and ensures nondiscrimination in all activities in accordance with all applicable laws. This position is open to all qualified applicants who are legally entitled to work in the country in which this job is located. Candidate selection is made by Talent Acquisition. Only electronic applications can be accepted.