10112 - Senior Security Engineer

10112 – SENIOR SECURITY ENGINEERSUMMARYThe Senior Security Engineer is an individual contributor who will participate and manage in all aspects of information and network security including intrusion detection, incident response, vulnerability assessment, application security and compliance with the corporate information security policy. This person will primarily be responsible for designing, implementing, administrating, operating and improving security technologies including but not limited to Network Access Control, End Point Protection, Two Factor Authentication and their procedures and processes.ESSENTIAL FUNCTIONSSecurity Engineering Design, build, test and deploy new security technologies, which include the development of the operational manual and run booksProvides technical security operations engineering services to support and update existing security systems and works to automate processes related to security implementations, monitoring, and enforcementInvestigates, recommends, evaluates, deploys and integrates operational security tools and techniques to improve our ability to protect corporate assets and infrastructureParticipate in technical risk assessments and security exposure analyses of systems, networks and business applicationsAnalyzes network security elements and overall network security architectural designs to ensure secure and optimal system and network performance and cost effectivenessOversees the installation, configuration and supportive processes of security technologiesParticipate in or lead the Incident Response activitiesInteracts with internal and external clients on security operations requirements, identifies security process and develops strategies/solutions to security issuesKeeps fully abreast of trends and changing technologies as they relate to IT and Network Engineering and Information Security fieldsLead or assist in periodic or ad-hoc security reports that provide relevant situational awareness to our senior stakeholdersSecurity Operations / AdministrationMonitor and manage our networks and infrastructure environment for attacks, malicious software and possible intrusions, which includes the follow up of complete remediation of infected systemsRequired to be on-call (after hours) per the established rotational scheduleImplement changes to our security technologies / infrastructure in accordance with standard and change control policies / proceduresEvaluate, implement, tune and operate Security Solutions such as IPS, Vulnerability scanning tools, encryption capabilities, etcMonitor and recommend improvements of security technologies and their various reportsRisk Management / Security Audit/Assessment Support / Ad-hoc supportSupport security audit / assessment related activities and compliance reviewsPerforms other task, duties and projects as assignedProvide Ad-hoc support as requiredREQUIREMENTSBachelor’s Degree in Computer Science, Information Systems or related field, or equivalent experience8+ years of IT relevant experience or equivalent combination of experience plus at least 5 years of experience performing Security Engineering / Planning / OperationsExperience in medium to complex computing environments, with advanced knowledge in security technologies and servicesHands-on experience with at least two or more of the following Enterprise Security Technologies:Network Intrusion Prevention / Detection Virtual Private Networks; SSL, IPSec and Site-to-Site Enterprise Class Stateful Inspection Firewalls Network Access Controls in context to Identity managementWindows Server OS & Desktop OSNetwork Packet InspectionDirectory Services including LDAP, AD and Secure Authentication TechnologiesExperience in implementing Information Security technologies and/or processes required. Experience in defining Information Security strategies and frameworksExperience integrating security technologies into corporate operations frameworks.Ability to communicate effectively with client staff at all levels, from technical to executiveMulti-task oriented in a team environment Demonstrated ability to pay close attention to detailKnowledge of Information Security risk assessment methodologies and standardsExperience developing technical documentation, including reports, proposals, statements of work, and whitepapersAbility to work independently, undertaking and completing project tasks on schedule with minimal supervisionCISSP, CISSP-ISSAP, SANS, or other professional certification applicable to security engineering are preferred.SummaryLocation: Fountain Valley, CA, United StatesType: Full TimeExperience: ExperiencedDepartment: Security