Security Engineer

Security Engineer

The Security Engineer role will be responsible for designing, implementing, and maintaining security measures to protect the organization's IT systems, networks, and data. In addition, this role will partner with highly skilled professionals across the business to identify vulnerabilities, monitor for threats, and ensure compliance with security policies and best practices. This candidate will be detail-oriented, highly analytical, and passionate about safeguarding organizational assets and information. In addition, the person in this role will have the mentality to think like a business owner and take a proactive yet collaborative approach to accomplishing organizational goals. This position reports directly to the IT Security Manager, Director of IT, or Chief Information Security Officer.

Responsibilities:

• Evaluate existing security tools and identify areas for improvement. Develop a roadmap to enhance DLP capabilities, close security gaps, and drive innovation.
• Design and implement mechanisms to detect sensitive data and security incidents, ensuring compliance with security standards and procedures.
• Share your knowledge and expertise by mentoring and developing team members to become DLP specialists.
• Evaluate and strengthen security tools and instrumentation to prevent cyberattacks and protect against potential exploits.
• Collaborate with information system custodians to understand their security needs and implement best practices aligned with our information security policy.
• Assist with monitoring and auditing information system activities to ensure security policy compliance and provide regular reports to management.
• Work with stakeholders across the organization to deliver DLP solutions that effectively support their business requirements.
• Conduct security risk assessments on new and existing systems, identify vulnerabilities, and recommend appropriate security countermeasures.
• Coordinate activities with loss prevention teams, and interact with legal and law enforcement as needed.

Requirements:

• Possess in-depth knowledge of DLP capabilities, including data discovery, tagging, classification, segregation, and loss prevention.
• Understand DLP functionalities for data at rest, in use, and in transit.
• Have practical experience with various DLP tools, including Symantec/McAfee DLP, Tanium, Proofpoint/Mimecast/Netskope, Google Workspace, CASB, and data discovery/management solutions.
• Proficient in at least one operating system (Windows, Linux, AIX, macOS, iSeries) and security concepts.
• Experience with automation and orchestration for managing server and workstation infrastructure efficiently.
• Comfortable with at least one scripting/programming language (PowerShell, shell scripting, Python, etc.).
• Have experience integrating disparate systems using APIs.
• Understand DLP integration with network platforms like firewalls, UTMs, and proxies.
• Knowledgeable about network segmentation and security zones for data protection based on classification.
• Possess a good understanding of authentication protocols like Kerberos, SAML, and OAuth.
• Be willing to share your knowledge and assist colleagues in understanding technical and security topics.

We're also looking for someone with:

• A strong understanding of information security standards and best practices.
• Working knowledge of networking protocols, web technologies, and cloud computing.
• The ability to analyze security data and identify potential compliance issues.
• Excellent problem-solving skills and the ability to understand complex data flows for security assessment.
• A team player with a positive attitude who can build strong working relationships.
• The ability to work independently and manage multiple tasks effectively.
• Innovation, creativity, and a strong sense of urgency.
• Exceptional communication skills to explain complex security concepts to diverse audiences.