Senior Security Engineer

As a Senior Security Engineer, you will be responsible for designing, implementing, managing, and monitoring security measures to protect computer systems, networks, and data. You will work closely with other IT professionals and departments to identify and resolve security issues, ensuring information confidentiality, integrity, and availability.

Your Impact and Responsibilities:

·        Designs and implements security systems, including firewalls, email protection, intrusion detection and prevention systems, malware protection, authentication systems, log management, and encryption protocols

·        Evaluates and recommends new security technologies, tools, and methodologies to enhance the organization's security posture

·        Conducts regular vulnerability assessments and penetration tests to identify and address security vulnerabilities

·        Collaborates with development and IT teams to remediate identified vulnerabilities.

·        Integrates into a Dev/Sec/Ops process

·        Develops and maintains an incident response plan

·        Enforces security policies, standards, and procedures

·        Ensures compliance with relevant regulations and standards (e.g., NIST, PCI)

·        Provides security training and awareness programs for employees

·        Promotes a security-conscious culture within the organization

·        Coordinates with SOC to monitor security logs and alerts, responding to and investigating security incidents

·        Prepares and presents security reports to management

·        Works closely with other IT teams, system administrators, and developers to integrate security best practices into the development and operation of systems

·        Communicates security risks and solutions to non-technical stakeholders

Requirements for Success:

·        8+ years of progressive experience in IT Security compliance, administration, and/or operations

·        Industry-standard certification in information security (CISSP, CISM, GIAC, etc.)

·        Able to work effectively and efficiently both independently and collaboratively

·        Detail-oriented, organized, and able to manage multiple priorities that may be constantly changing

·        Self-driven, flexible, and highly energetic with strong analytical, written, and verbal communication skills

·        Strong situational analysis, decision-making abilities, and ability to deliver within tight deadlines

·        Able to work during non-standard business hours and weekends, as needed

·        Experience with scripting and programming technologies

·        Able to manage and maintain effective working relationships with peers and vendors

·        Experience managing complex enterprise-level security administration tools and environments

·        Advanced understanding and application of AWS, application security, and secure software development practices

·        Engineering experience with SIEM, Web Filtering, Web Application Firewalls, Network Firewalls, EDR/XDR

·        Knowledgeable about industry security standards, compliance, and best practices

·        Excellent leadership and communication skills, with the ability to collaborate effectively across teams

·        Advanced understanding of the IT Security frameworks, processes, audit preparedness, and remediation