Information Security Engineer II

It’s fun to work in a company where people truly BELIEVE in what they’re doing!

We’re committed to bringing passion and customer focus to the business.

At Simmons Bank, the Security Engineering Teamis responsible forthe design, implementation, and maintenance of security solutionsto include,but not limited to:Identity& Access Protection, Email Security, Network Security, Endpoint Protection, Data ProtectionandVulnerability Management.These security solutions securecriticalbusinessoperations andprotect our customers and data.

You will join a team of Associates dedicated to ensuring the security of the corporate network andbe responsible forthe day-to-day operation of the Information Security Program.

Level IISecurity Engineers areprimarilyresponsible for theimplementation and maintenance of security systems and supportingend-users’ use of the Company’s security services.Level II Security Engineersoperatewith limited direct supervision and providementoring of Level I Security Engineers.

Essential Duties and Responsibilities

SystemsEngineering

• Contributessubstantiallytothe designandimplementation ofsecuritysystems, as needed

• Identifiesand documents system security requirementstoassistwithsolutionselection

• Assistswith the evaluation of newtechnologiesorprocessimprovementsthat enhance security capabilities

• Serves as specialist for certain security systems, as assigned

System Administration

• Configures,maintains, andmonitorsthe Company’ssecurity systems, including but not limitedto:secure email gateway,firewall, VPN, network access control,secureweb gateway,security information and event management platform,endpoint protection,data losspreventionand vulnerabilityscanningtools

• Supports Level I Security Engineers with service request and incident tickets, as needed

• Supports Level I Security Engineers with system changes, as needed

• Handles service request and incident ticketspertaining tosecuritysystems

• Reviewssystemalerts and respondsin accordance withestablished procedures(e.g.triage, mitigate, and eliminate)

• Researches, tests and presents proposed security system changes to IT and Business leadership

• Conducts securitysystem changesin accordancewiththe change management process

• Collaborateswithexternal parties (e.g.vendor support,professionalservicesand others)tomaintainsecurity technologies

• Monitors cases, tickets, and incidents opened with vendor support to ensuretimelyresponse and remediation

• Applies upgrades, patches, and other configurations in support of the patch management and vulnerability management processes

• Maintainsthe team’s writtendocumentation (e.g.diagrams, procedures,and other system information)forthe Company’ssecurity systems

Administrative

• Participates in rotating on-call schedulerepresentingtheSecurity Engineeringteam

• Mentorsotherteam members andsupportscross-training

• Communicates security concerns to managementin a timely manner

• Completes training related to this position, as assigned,in a timely manner

• Pursues IT and/or Security certifications relevant to this position

• Takes initiative and responsibility for achieving desired results

• Performs other duties as assigned

Qualifications

Education and/or Experience

• Minimum ofsix(6) years of experience in information technology, networkengineering, or securityengineering(required)

• Bachelor’s degree in a related field (preferred)

• Direct experienceadministeringsecuritysystemssuch as:endpoint protection,networkaccess control, web content filtering, data loss prevention, vulnerability scanners, and firewalls (required)

• ExperienceinoperationalrolessupportingofITsystems, networks,or applicationsanddirect experience conductingbasictroubleshootingsteps,documenting tickets, andcommunicating with end-users (required)

Certifications

• CompTiaA+,Security+, Network+, or other baseline security related certifications (required)

• CISSP, SSCP,CEH, or other intermediate security related certifications (preferred)

Other Qualifications (including physical requirements)

• Must be willing to periodically work non-standard hours and be on call

• Intermediateunderstanding ofcommon enterpriseoperating systems, database systems, andnetworks

• Basic understanding of cloud computing architecture andcloud services

• Baseline knowledge of security technology landscape and emerging security technology

• Working knowledge of Microsoft Windows operating systems for advancedtroubleshootingtechniques

• Ability to read and interpret documents and follow written or verbal instructions

• Ability to transform technical details and processes into written instructions,playbooksand procedures

• Ability to conduct oral and written communicationand present, in a professional manner, to internal and external parties

• Ability to prioritize assignmentswhile working on multiple projects

• Ability to manage their own time with awareness to escape issues promptly and with focused on meeting SLA targets

• Ability to work independently with limited supervision

• Possesses service-oriented mindset and strong customer service skills

Pleasenotethis job description is not designed to cover orcontaina comprehensive listing of activities, duties or responsibilities that arerequired ofthe employee for this job.Activities,dutiesand responsibilities may change at any time with or without notice.

Equal Employment Opportunity Information: Simmons First National Corporation and its subsidiaries are committed to a policy of equal employment with respect to a person’s race, color, religion, sex, ancestry, sexual orientation, gender identity, national origin, covered veterans, military status, physical or mental disability or any other legally protected classifications.