Senior Security Engineer

Description

• Builds security automation scripts and tools to streamline security operations and improve efficiency
• Deploys and helps maintain a secure cloud infrastructure and security controls. This includes network security, security monitoring, data protection, and compliance configuration
• May assist the Security Architect in conducting threat modeling and risk assessments for new projects and cloud initiatives, identifying and mitigating potential security risks
• Conducts comprehensive security assessments and audits to determine the effectiveness of security controls
• Plays an active role in contributing ideas for security innovations
• Trains and engages operations and support personnel on security solutions.
• Implements and maintains access control system for any type of new enhancement opportunities
• Acts as primary technical resource for design and implementation projects.
• Monitors and analyzes security events and logs to make sure backend and correlation are implemented and working
• Advise on trends, threats, and emerging security risks, relevant to the organization.
• Designs and implements robust security ensuring alignment with industry best practices and organization configurations
• Mentors team members on technical and security methodology characteristics.
• Acts as escalation contact and subject matter expert for security operations and information technology team in relation to security solutions and practices.
• Improves maturity capability of processes, procedures, and operations of the security program.
• Assists operations as needed in incident response and contribute to post-incident analysis
• Assists in the design and execution of incident response as it pertains to security engineering
• Works closely with cross-functional teams to provide security guidance and best practices, ensuring security is embedded in the project lifecycle
• Drafts and recommends operating procedures and changes to information security practices and solutions.
• Designs and implements security solutions for various platforms
• Communicates intelligence and program effectiveness reports to supervision.
• Engineer effective solutions that securely enable and protect in alignment with our organization compliance requirements.
• Autonomy & Decision-Making: Makes decisions on routine matters, provides recommendations to supervisor and refers all exceptions to supervisor.
• Develops and implements security policies, procedures, and configuration standards to meet regulatory and client security requirements
• Implements security technologies with full understanding on accountability and ownership for full deployment
• Collaborates with development teams to ensure secure software development practices
• Ensures compliance with security frameworks and regulations by engineering and implementing new security controls to address gaps in the security program
• Reviews the Governance, Risk, and Compliance platform to determine any opportunities to lower security risk level
• Continuously improving the security program with automation and orchestration scripting for security operations efficiency and effectiveness.
• Advocates secure culture and provides education throughout the appropriate client group.
• Communicates with operational groups for collaboration of security program management.

Requirements

• Ability to work in team and independently
• Ability to solve technical issues - Advanced
• Ability to quickly and effectively solve complex problems
• In lieu of the above requirements, equivalent relevant experience will be considered
• May require periods of overnight travel
• Ability to lead technical projects once assigned
• Working knowledge of NIST cyber security framework, defense federal acquisition regulation supplement, and ISO 270XX
• Ability to build relationships and collaborate within a team, internally and externally
• 5+ Years information security experience (Preferred)
• Ability to work a flexible schedule – might be on call in the evenings and weekends
• Must be able to lift up to 25 pounds
• Occasional activity: Standing, Walking, Bending, Climbing, Reaching above Shoulder, Pushing, Pulling
• Organizational skills
• Ability to perform work accurately and completely, and in a timely manner
• Technical writing and documentation skills
• Proficient with multiple IT platforms including Microsoft Windows, Linux, iOS, Cisco Networking, Cisco firewalls, intrusion detection and load balancers
• May be a subject matter expert for a variety of security related systems or applications.
• Demonstrated expert knowledge of information security practices
• Ability to deliver quality through attention to detail
• Bachelor’s degree in information security or related field (Preferred)
• Frequent activity: Sitting, Viewing Computer Screen
• Substantial knowledge of Python and Powershell scripting languages
• Proficient with multiple cloud platforms
• Communication skills, verbal and written – Intermediate

Benefits

• Normal office environment

Training + Development

Interview process

Visa Sponsorship

Security clearance