Security Engineer

Security Engineer

The Security Engineer is expected to perform a combination of cyber security functions such as deployment, maintenance, testing, and investigation of cyber security products, to ensure secure internal network protocols are implemented. This role will use problem solving based on the company's security, policy and compliance requirements as well as combination of forensic and analytical and technical skills in reviewing network interfaces and activities.

Responsibilities:

• Maintains all security systems and their corresponding or associated software, such as firewalls, intrusion detection/prevention systems, vulnerability management, SIEM, and anti-virus software.
• Monitors and reports on security systems and end user activity audits.
• Triages potential security incidents, assist with resolution and escalates to incidence response Manager/Team as needed.
• Maintains and monitors endpoint protection software such as antivirus, MDR, and other security-oriented endpoint protection platforms.
• Recommends, schedules (where appropriate), apply fixes, security patches, assist with disaster recovery procedures, and any other measures required in the event of a security breach.
• Assist with remediation identified through the Vulnerability and Penetration testing.
• Implement scripting where applicable to automate processes.
• Assists with monitoring the overall operation of networks/Systems and participates in cyber security related problem resolutions.
• Assist with performing remediations based on audit requirements and identified gaps.
• Contacts hardware and software vendors to resolve technical problems.
• Provides end-user support and training for security related products, practices, and policies.
• Assist with deployments and maintenance of tools related to MDM, RBAC, PAM, IAM, Configuration management etc. to comply with HITRUST and SOC 2TYPE ii domain controls.
• Provides technical services to relating to use, operation, and management of technology.
• Keeps current with emerging cyber security events, trends and threat sources.
• Performs other duties as assigned.

Minimum Required Qualifications:

• Bachelor’s Degree or higher (Management Information Systems, Decision and Information Sciences, Computer Information Systems, Computer Sciences, Accounting/Finance, etc.) or equivalent experience.
• At least three years of IT Security tools deployment experience OR at least four (4) years of experience in Information Security analysis.
• Proficiency in communication, strong verbal skills.
• Strong project management skills and technical skills around security related tools.
• Possesses proficient understanding of: IT general controls (e.g., security, change management, disaster recovery & backup, infrastructure, etc.); SDLC/Agile methodologies, cybersecurity, and cloud.
• Possesses intermediate understanding of operating system and database platforms (e.g., mainframe, Active Directory, Windows, Linux, Oracle, etc.); network architecture; IT governance processes; IT risk management and assessment processes.

Preferred Certifications:

• Security +
• GIAC GSEC (Global Information Assurance Certification)
• SSCP (Systems Security Certified Practitioner)

Additional Qualifications:

• Broad hands-on knowledge of firewalls, intrusion prevention/detection systems, anti-virus software, data encryption, and other industry-standard techniques and practices
• In-depth technical knowledge of network, PC, and platform operating systems
• Working technical knowledge of current systems software, protocols, and standards
• Strong knowledge of TCP/IP and network administration/protocols
• Familiarity with security frameworks such as, ISO 27001, SOC 2 TYPE II, HITRUST etc.
• Intuition and keen instincts to pre-empt attacks
• Ability to develop basic scripts in languages such as PowerShell or Python
• Knowledge of applicable practices and laws relating to data privacy and protection
• High level of analytical and problem-solving abilities
• Ability to conduct research into security issues and products as required
• Strong understanding of the organization's goals and objectives
• Strong interpersonal and oral communication skills
• Highly self-motivated and directed
• Strong organizational skills
• Excellent attention to detail
• Ability to effectively prioritize and execute tasks in a high-pressure environment
• Experience working in a team-oriented, collaborative environment

Flexible work from home options available. Compensation: $85,000.00 per hour