Security and Compliance Engineer, IT - CMMC/NIST SP 800-171

Job Description

Job Description

Description:

Introduction

We are a provider of outsourced IT and cyber security services for small and medium-sized businesses in New England offering of remote support, field support, managed and security services (MSP/MSSP) as well as project management for our clients.

We work diligently with out clients to help identify and manage their cyber security risks that may stem from external/internal cyber threats, identity and access management challenges, online fraud, compliance pressure, or any number of other business and technology issues.

Position Summary

The Security and Compliance Engineer will be a key member within the security division and possess a comprehensive skill set in network security operations, cyber security tools, intrusion detection, and secured networks. This role will work to improve clients' security posture.

This position will write security assessments as well as develop policies to address problems and security emergencies and make recommendations to clients. This position requires analyzing the environment, coordinating data gathering, and generating solutions on a day-to-day basis, and assisting with projects and investigations related to threat management and security breaches for clients.

Primary Responsibilities

• Consult and participate in day-to-day security operational activities with clients;
• Confirm and document client vulnerability and security risks and develop mitigation plans;
• Monitor and validate client security controls;
• Respond to security alerts, incidents, and issues;
• Ensure security controls meet multiple compliance needs and best practices;
• Conduct, write, and present client Security and Risk Assessments using recognized frameworks (NIST SP 800-171 and PCI DSS v3.2 or other security compliance frameworks);
• Create accurate network diagrams and documentation for planning security-based changes, investigating network impact, and issuing resolution procedures;
• Coordinates and tracks security awareness training to the organizational workforce on information security standards, policies, and best practices;
• Consistently review relevant Cyber Security Compliances to educate clients on revisions and changes in requirements;
• Assist in investigating security breaches by leading the incident response to minimize impact, determine the cause of the breach, and ascertain the extent of the damage;
• Travel as needed for on-site assessments and meetings at client locations; limited and infrequent.
• Other duties as necessary and required.

Knowledge & Skills

• Experience with network/cyber security engineering: design, implementation, optimization, monitoring, and troubleshooting of LAN, WAN, WLAN, and DR networks;
• Demonstrated best practice usage of security technologies and policy administration: Firewalls, IDS/IPS, DLP, Proxy, Endpoint, Vulnerability scanning and management, SIEM / logging, security groups, and network segmentation, system hardening, incident response, and malware/virus prevention;
• Experience with network security technologies including Rapid Fire, SolarWinds, Sophos, BlueCoat, SonicWALL, Cisco, CrowdStrike, and Splunk;
• Documenting security controls, monitoring, and alerting around these controls;
• Clear understanding of virtualization technologies such as VMWare and Hyper-V;
• Knowledge of multi-tier application architecture on infrastructure and cloud environments;
• Demonstrated skill securing sensitive data in production environments;
• Self-starter with a strong work ethic willing to identify issues and lead them to conclusion;
• Ability to see the big picture and present ideas clearly with demonstrated thought leadership to clients;
• Capable of meeting with clients to discuss cyber security solutions and recommendations.

Technical Qualifications

• Bachelor's degree preferable in Information Technology or other engineering or technical discipline; PLUS
• 6-8 years IT experience and minimum 4 years Cyber Security Information experience;
• One or more Industry security certifications REQUIRED, Certified Information Systems Security Professional (CISSP), CISA Certified Information Systems Auditor (CISA), CISM Certified Information Security Manager (CISM), ISSAP Information Systems Security Architecture Professional (ISSAP), ISSEP Information Systems Security Engineering Professional (ISSEP); (OR equivalent)
• Experience with modern operating systems including Windows 10/11 and Server 2016/2019, macOS, and Linux;
• In-depth understanding of NIST SP 800-171, CIS Controls, and/or other security compliance frameworks;
• Experience in developing organization security policies and implementation of revised policies;
• Experience with endpoint security solutions, including file integrity monitoring and data loss prevention.

Personal Attributes

• Excellent analytical and problem-solving skills;
• Ability to work independently on multiple projects;
• Collaborates and assumes a technical leadership role when required;
• Ability to mentor coworkers on network security best practices;
• Ability to explain network concepts to both fellow technical staff and clients;
• Is effective in prioritizing tasks within a high-pressure competing environment;
• Highly self-motivated and directed, with keen attention to detail;
• Demonstrates excellent oral and written communication skills, fluency in English language;
• Demonstrates an interest in working hard in a fast-paced environment;
• Excels in customer-facing environments and enjoys challenges;
• Strong organizational skills;

Minimum Technical Requirements

• Knowledge of current networking technologies;
• Strong knowledge of configuring and troubleshooting modern operating systems;
• Knowledge of Microsoft Office/ Office 365;
• Knowledge of TCP/IP, DNS, DHCP, and Active Directory;
• Knowledge of LAN/WAN technologies;
• Understanding of firewalls, routers, and VPN/remote access solutions;
• Demonstrated experience with IT Security and Compliance;
• Knowledge of installing and configuring Windows Servers 2008-2012 a PLUS;
• MAC and LINUX experience a PLUS.

Competitive Pay and Benefits:

Health and Dental

Life Insurance

Paid Time Off

Discretionary Bonus

Retirement Savings with Employer Matching Contribution

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible spending account
• Health insurance
• Life insurance
• Paid time off
• Vision insurance

Compensation Package:

• Base pay;
• Profit sharing (discretionary)

Schedule:

• 8 hour shift

Work Location: Remote

We are located in MA with clients throughout the US. Qualified candidates will be reviewed and scheduled for initial interview with Human Resources.

REQUIRED: Applicants living in the US, near Massachusetts, NE, or nearby Northeast, EST only.

Requirements: