Senior Information Security Engineer

Senior Information Security Engineer

Requirements

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 4+ years of technology experience
• 1+ year of Security engineering experience
• 1+ year of managing medium technology development efforts
• 1+ year of managing large scale enterprise security solutions
• 1+ year of experience working with automation/management tools such as XSOAR, Skybox and Ansible
• 1+ year of fundamental knowledge of networks and networking
• 1+ year of fundamental knowledge of information security and security principles
• 1+ year of fundamental knowledge of information security standards, frameworks, policies, controls, and regulations
• 1+ year of experience with and knowledge of firewall and IPS technologies

Responsibilities

• Develop specifications for extremely complex computer network security/protection technologies for company information, network, systems, and applications.
• Consult on or participate in moderately complex initiatives and deliverables within Information Security Engineering.
• Contribute to large-scale planning related to Information Security Engineering deliverables.
• Review and analyze moderately complex Information Security Engineering challenges that require an in-depth evaluation of variable factors.
• Contribute to the resolution of moderately complex issues and consult with others to meet Information Security Engineering deliverables while leveraging solid understanding of the function, policies, procedures, and compliance requirements.
• Collaborate with client personnel in Information Security Engineering.
• Consult with business partners in requirement gathering to ready them for large scale data center migration activities.
• Lead the development of security solutions for the company’s networks and virtual private networks, application systems, key public infrastructures, authentication, and directory services to ensure the security of the network and confidential data.
• Work with teams to develop automation of security solutions.
• Gather and assemble data from clients, architects, policies, vendors, and business partners to design secure and compliant solutions.
• Design, document, plan, coordinate, and implement complex information security solutions.
• Identify emergent vulnerabilities, evaluate associated risks and threats, and design network vulnerability scans to identify security vulnerabilities and provide remediation alternatives to the customer.
• Serve as technical lead responsible for specific areas of computer security incident response activities to include intrusion detection monitoring, network security architecture, cyber threat reporting, and development/implementation of vulnerability mitigation strategies.
• Lead security risk assessments to ensure compliance with corporate security policies and adherence to best practices.
• Lead the evaluation of vendor proposals, new and existing security designs, and emerging security technologies and systems.
• Lead teams including business partners and vendors to solve problems and design information and network security solutions.
• Serve as a high-level technical security resource on large-scale network and/or systems/applications issues.
• Direct or serve as a mentor to less experienced staff.

Preferred Qualifications

• Experience working with Fortinet, Checkpoint, Palo Alto firewalls
• Strong analytical and problem-solving skills with high attention to detail and accuracy
• Experience working in Agile methodology with ability to elicit requirements, user stories, document progress
• Experience and familiarity with Change control processes – Service Now
• Knowledge and understanding of network infrastructure systems (routing, switching, load balancing, or firewalls) and internet technologies
• Ability to prioritize work, meet deadlines, achieve goals, and work under pressure in a dynamic and complex environment
• Knowledge and understanding of SharePoint
• Knowledge and understanding of Agile
• Intermediate Microsoft Office (Word, Excel, Outlook, PowerPoint, Access, and Project) skills
• Industry recognized security certifications.
• Knowledge of regulations required in a financial environment
• Knowledge of IPv6 networking and protocols
• Experience writing technical procedures, references, and other documentation.
• Experience working with cross functional teams