Information Security Engineer

Role Summary

Responsibilities

• Assist in the design and implementation of security controls to address risks in the environment. This includes, but not limited to, the configuration and management of Web Application Firewalls, IDS/IPS, SIEM, NextGen AV, Application Security, and Vulnerability Management.
• Identify and mitigate vulnerabilities within the network, system, and application environment.
• Assist in creating appropriate disaster recovery documentation for security controls.
• Troubleshooting of issues and testing across multiple platforms and applications.
• Triage and drive vulnerability issues to a thorough, immediate, and effective conclusion.
• Respond to security incidents in a timely manner and conduct root cause analysis, implementing corrective actions to prevent future occurrences.
• Review security requirements at relevant phases for both technical and operational perspective for new and existing projects.
• Identifies, implements, and monitors best practices for information security architecture.
• Assist with the documentation and review of policies, procedures, and standards.
• Interfaces with user community and assists with IT risk and security needs.
• Ensures that the user community understands and adheres to necessary procedures.
• Create security architecture diagrams, standards, and procedures as appropriate.
• Performs other duties as required.
  

Qualifications:

• In-depth understanding of common operating systems, networking technologies, application security, and cloud architecture.
• Excellent aptitude for IT Risk & Compliance concepts and methodologies.
• Hands-on cybersecurity troubleshooting experience.
• Demonstrated knowledge and understanding of information technology industry trends and emerging technologies and an ability to relate them to the company and its objectives.
• Familiar with IT policies, laws, standards and frameworks applicable to the specific technical role.
• Experience managing vulnerability management platforms.
• Working Technical knowledge of CIS baseline standards and enforcement.
• Hands-on experience implementing and maintaining Proofpoint or equivalent email security tools.
• In-Depth knowledge of application and cloud-based security.
• Hands-on experience managing End point security products.
• Deep understanding of Active Directory.
• Working technical knowledge of Identity and access management.
• Working knowledge of ticketing and change management software.
  

Minimum Experience And Education

• 5+ years of hands-on experience in an internal or third-party IT information security engineering role is preferred.
• Bachelor's Degree or equivalent experience is preferred.
• Relevant industry Security certification preferred.
  

Travel:

• This position is remote.
• Travel is not required.