Cyber Security Engineer/ NYC ( Onsite ), Long Term

Cyber Security Engineer

The job opening is for an experienced, hands-on senior security engineer/architect that will design, configure, implement, and support security controls in a growing enterprise environment. The security engineer responsibilities will include leading security projects involving LAN, WAN, IoT, OT, Office 365, Datacenter, Wireless, Cloud, endpoints etc.

Responsibilities:

• Architect security controls
• Perform security risk assessments of applications, cloud services, and networks
• Configure IDS/IPS security policies
• Configure and support security policies in DNS & WAF
• Configure and support security policies in Reverse and forward Web Proxy server, CASB
• Examine current firewall policies and ensure completeness and accuracy
• Troubleshoot level 3 security related issues.
• Architect and configure cloud security controls and VMWare environment
• Utilize SEIM, Armis, Extrahop and Secureworks for threat intelligence and incidence response
• Use network monitoring tools to triage incidents and perform asset management tasks Maintain risk register
• Manage Disaster Recovery, Incident Management, and Business Continuity activities
• Lead the resolution of security incidents
• Conduct periodic audits on user access control verifications
• Address vulnerabilities
• Work with vendors to integrate security platforms into the infrastructure
• Implement DLP controls

Requirements:

• 5 years or more of Security Engineering experience in a complex enterprise environment
• Strong project management experience
• Must be able to lead projects
• Bachelor's degree in computer science, information technology or related field.
• Should be able to utilize security frameworks like NIST and MITRE.
• Proficient in the use of security management tools to facilitate troubleshooting, e.g., Wireshark, NetBrain, Extrahop, NetWitness, CoreInsight etc.
• Experience in some of these application security related tools: Burp Suite, Fortify, Zimperium, Veracode, HCL AppScan tools
• Strong knowledge of Proxy Web Gateway
• Experience in Netwrix data classification and auditing tool
• Experience with Trellix EPO and Crowdstrike
• Experience with Skyhigh Proxy Gateway and CASB
• Experience with Menlo Security web and email isolation tool
• Configure security policies in DNS and WAF
• Strong understanding of network, application, and cloud security
• Strong Identity and Access Management background
• Experience with configuring DNS. Familiarity with Infoblox to maintain public facing DNS services as well as IPAM
• Understanding of the various VPN technologies
• Knowledge of security of wireless environment including controllers and Client.
• Knowledge of resilient designs to ensure high availability
• Knowledge of IPS/IDS design as standalone hardware or as a feature within firewalls
• Understanding of IoT and OT security
• Ability to create reports using KRI and KPI
• Experience with Next Generation Firewalls including Palo alto, Fortinet, etc.
• Background in WAFs
• Work with vendors, carriers, and other technical groups to implement new security controls and troubleshoot existing controls
• Any automation experience is a plus