Security Engineer

Security Engineer HonorVet Technologies is a Service Disable Veteran-Owned IT staffing firm, ISO 9001, and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you are headed and only reach out when we genuinely believe there's a fit worth exploring. I came across your profile, and something stood out. Position Title: Security Engineer Duration: 12 months to start with the possibility of extension Location: Remote, Downey, CA, 90242 Position Description: A Security Engineer serves as the security engineer of complex technology implementations in a product-centric environment; is comfortable with bridging the gap between legacy development or operations teams and working toward a shared culture and vision; works to ensure developers create the most secure systems while enhancing the privacy of all system users; and has experience with white-hat hacking and fundamental computer science concepts. The Security Engineer will perform security audits, risk analysis, application-level vulnerability testing, and security code reviews; develop and implement technical solutions to help mitigate security vulnerabilities; and conduct research to identify new attack vectors. Skills Required: Security Engineers will possess knowledge and experience in safeguarding sensitive data from cyber-attacks. Additional Skills Required: Possess in-depth knowledge of administering and configuring Proofpoint Core Email Protection, including secure email gateway (SEG) and API-based deployments, and Abnormal Security. Possess in-depth knowledge of supporting Microsoft Exchange Server (on-premises), Exchange Online, and Windows Defender/Microsoft Defender in an email security environment. Possess in-depth knowledge of interpreting DMARC policies and reports, troubleshooting SPF and DKIM authentication and alignment issues, and coordinating with third-party vendors to resolve configuration and email-delivery problems. Strong understanding of SMTP and email authentication, including SPF, DKIM, and DMARC. Possess in-depth knowledge of email-related DNS records, including MX, A, CNAME, TXT, and PTR records. Possess in-depth knowledge of SIEM platforms to query and analyze historical email data and logs for threat investigations and incident response. Ability to identify, investigate, and mitigate email threats, including phishing, business email compromise, malware, spam, impersonation, and account compromise. Knowledge of email-related compliance requirements, such as HIPAA. Ability to identify configuration issues and security anomalies, work with technology vendors to resolve problems, and follow change control procedures. Ability to apply advanced troubleshooting skills for complex email security and mail-flow issues. Ability to create and maintain technical documentation, procedures, and instructions for both technical staff and end users. Ability to develop and implement technical solutions that reduce security vulnerabilities. Experience Required: This classification must have a minimum of ten (10) years of experience with developing and implementing technical solutions to help mitigate security vulnerabilities. Additional Experience Required: Minimum of three (3) years of work experience within the last 4 years with cybersecurity tools and technologies, including IDS/IPS, two-factor and multifactor authentication (2FA/MFA), SIEM, DLP, log correlation, SOC-as-a-Service (SOCaaS), incident response, retroactive malware analysis, raw logs, cleanup and restoration, risk and vulnerability management, and Secureworks Taegis XDR/MDR. -Minimum of three (3) years of work experience within the last 4 years with security solutions, including Proofpoint Email Protection Gateway; advanced phishing protection such as Abnormal, Cisco CMD, and Darktrace; Microsoft 365, Azure AD, Exchange Online, and Windows Defender; and PRTG monitoring. -Minimum of three (3) years of work experience within the last 4 years integrating cloud-based email services with on-premises secure email gateway (SEG) solutions to maintain consistent security across platforms. -Minimum of three (3) years of work experience within the last 4 years monitoring and optimizing email security systems to handle large volumes of email traffic efficiently. -Minimum of three (3) years of work experience within the last 4 years planning and executing email security system migrations between platforms with minimal downtime. -Minimum of three (3) years of work experience within the last 4 years with Proofpoint Email Protection Gateway, including managing email blacklisting, sender reputation, and all other features of Proofpoint. -Minimum of three (3) years of work experience within the last 4 years interpreting DMARC policies and reports, troubleshooting SPF and DKIM authentication and alignment issues. Education Required: This classification requires the possession of a bachelor's degree in an IT-related or Engineering field. Additional qualifying experience may be substituted for the required education on a year-for-year basis. Additional Education Required: Minimum Bachelor of Science degree in Computer Science or a related field. Additional Information: The consultant must be available Monday through Friday, from 8:00 a.m. to 5:00 p.m. Pacific Time, and participate in assigned on-call schedules to support after-hours escalations and production incidents. The consultant must have a reliable laptop equipped with a functional camera and microphone to participate in virtual meetings with the camera enabled, as required. HonorVet Technologies