Network Security Engineer

Network Security EngineerThe Network Security Engineer will have practical, hands-on experience with all aspects of network security and its management in an enterprise environment. This role is expected to provide strong leadership and relevant recommendations with regard to the design, implementation and support of the enterprise security environment including patch management process at client. This environment includes approximately 2000 staff members located in more than 50 offices across the globe.The ideal candidate will possess a combination of technical expertise in some or all of the areas listed below combined with experience in managing third-party resources in order to successfully execute tasks:Network Security Hardware & Software ManagementPatch Management and Vulnerability RemediationSecurity Information and Event ManagementCandidates with experience in one or more of the following areas will be strongly preferred:Securing Cloud-based servers & applicationsIntrusion Detection/Prevention SystemsNetwork Event CorrelationLinuxMicrosoft AzureUnderstanding linkages between networks, applications and systems.Working as a member of a core IT team based in Chicago, IL and reporting to the Manager of Global Infrastructure, the Network Security Engineer will have primary responsibility for all network security management processes design, implementations, maintenance and support throughout the client environment. Will provide leadership and direction to Network Operations Center (NOC) resources and serve as primary escalation point for all security incidents. Also they will be responsible for understanding Common Vulnerabilities and Exposures (CVE), determine whether identified CVEs apply to environment, design and implement patch process to address CVE.QualificationsResponsibilitiesDocumentation & management of enterprise security devices including but not limited to routers, firewalls, switches, and WAN accelerators.Maintain currency of all network documentation.Serve as primary Point of Contact (PoC) for Manager Network Monitoring Service vendor to assess, prioritize and implement recommended remediation to identified incidents.Research of identified CVE for operating system platformsProvide subject matter expertise on everything from host hardening to web application vulnerabilities.Provide leadership in driving internal vulnerability and patch projects across platforms including but not limited to PCs, Servers and Network.Managing patch implementation across platforms including but not limited to PCs, Servers and Network.Find and fix vulnerability issues and assist others to architect solutions with security in mind.Assess and implement vendor vulnerability and patch solutions that support the business goals of the organization.Prioritize work efforts based on intelligent assessment of risk.Perform vulnerability assessments of a variety of applications and systems including but not limited to PCs, Servers, Network.Where necessary, build internal tools to fill gaps in vendor provided tools.Ability to create detailed and usable documentation of the patch processes.Ability to read, analyzes, and interprets technical journals.Ability to contribute to the development and refinement of client technology roadmaps by proactively assessing current technology capabilities against current and emerging business needs.Ensure proper protection and use of software, including virus protectionThe PersonEducation B.S. in Computer Science or equivalent preferred.Experience Possess a minimum of five (5) years' experience designing, implementing and managing complex network security environments.Possess a minimum five (5) years' experience implementing and supporting vulnerability and patch management in enterprise environment.Hands on practical experience working with key network & security hardware and software including Cisco, CheckPoint, Juniper.Experience working with multiple operating systems with expert level knowledge of Linux, Microsoft Windows or OS X.Strong well rounded background in host, network and application vulnerability and patch management.Advanced knowledge of TCP/IP networking and network services such as DNS, SMTP, DHCP, etc.Familiarity with regulatory and compliance requirements, such as SOX, HIPAA, PCI-DSS, etc.Extensive knowledge of internet security issues and the threat landscape.Experience in securing cloud applications, environments and servers.Experience with shell scripting and one or more programming languages is strongly preferred.Additional InformationAll your information will be kept confidential according to EEO guidelines.