Senior Security Engineer

Description

• Implements security technologies with full understanding on accountability and ownership for full deployment
• Ensures compliance with security frameworks and regulations by engineering and implementing new security controls to address gaps in the security program
• Acts as escalation contact and subject matter expert for security operations and information technology team in relation to security solutions and practices.
• Advise on trends, threats, and emerging security risks, relevant to the organization.
• Collaborates with development teams to ensure secure software development practices
• Builds security automation scripts and tools to streamline security operations and improve efficiency
• Trains and engages operations and support personnel on security solutions.
• Monitors and analyzes security events and logs to make sure backend and correlation are implemented and working
• Communicates intelligence and program effectiveness reports to supervision.
• Autonomy & Decision-Making: Makes decisions on routine matters, provides recommendations to supervisor and refers all exceptions to supervisor.
• Assists in the design and execution of incident response as it pertains to security engineering
• Deploys and helps maintain a secure cloud infrastructure and security controls. This includes network security, security monitoring, data protection, and compliance configuration
• Develops and implements security policies, procedures, and configuration standards to meet regulatory and client security requirements
• Mentors team members on technical and security methodology characteristics.
• Designs and implements security solutions for various platforms
• Engineer effective solutions that securely enable and protect in alignment with our organization compliance requirements.
• May assist the Security Architect in conducting threat modeling and risk assessments for new projects and cloud initiatives, identifying and mitigating potential security risks
• Advocates secure culture and provides education throughout the appropriate client group.
• Drafts and recommends operating procedures and changes to information security practices and solutions.
• Improves maturity capability of processes, procedures, and operations of the security program.
• Implements and maintains access control system for any type of new enhancement opportunities
• Acts as primary technical resource for design and implementation projects.
• Designs and implements robust security ensuring alignment with industry best practices and organization configurations
• Continuously improving the security program with automation and orchestration scripting for security operations efficiency and effectiveness.
• Works closely with cross-functional teams to provide security guidance and best practices, ensuring security is embedded in the project lifecycle
• Reviews the Governance, Risk, and Compliance platform to determine any opportunities to lower security risk level
• Conducts comprehensive security assessments and audits to determine the effectiveness of security controls
• Assists operations as needed in incident response and contribute to post-incident analysis
• Communicates with operational groups for collaboration of security program management.
• Plays an active role in contributing ideas for security innovations

Requirements

• Ability to build relationships and collaborate within a team, internally and externally
• Ability to perform work accurately and completely, and in a timely manner
• May require periods of overnight travel
• Communication skills, verbal and written – Intermediate
• Working knowledge of NIST cyber security framework, defense federal acquisition regulation supplement, and ISO 270XX
• Ability to quickly and effectively solve complex problems
• Proficient with multiple cloud platforms
• Ability to deliver quality through attention to detail
• Ability to work in team and independently
• Substantial knowledge of Python and Powershell scripting languages
• 5+ Years information security experience (Preferred)
• Ability to solve technical issues - Advanced
• Ability to lead technical projects once assigned
• In lieu of the above requirements, equivalent relevant experience will be considered
• Bachelor’s degree in information security or related field (Preferred)
• Must be able to lift up to 25 pounds
• Occasional activity: Standing, Walking, Bending, Climbing, Reaching above Shoulder, Pushing, Pulling
• Technical writing and documentation skills
• Ability to work a flexible schedule – might be on call in the evenings and weekends
• Frequent activity: Sitting, Viewing Computer Screen
• Demonstrated expert knowledge of information security practices
• Proficient with multiple IT platforms including Microsoft Windows, Linux, iOS, Cisco Networking, Cisco firewalls, intrusion detection and load balancers
• May be a subject matter expert for a variety of security related systems or applications.
• Organizational skills

Benefits

• Normal office environment

Training + Development

Interview process

Visa Sponsorship

Security clearance