Senior Information Security Engineer

In this role, you will:

• Lead or participate in computer security incident response activities for moderately complex events
• Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
• Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards
• Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
• Review and correlate security logs
• Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
• Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications:

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• 8 years of information security applications and systems experience
• 2+ years of Agile Scrum (Daily Standup, Sprint Planning and Sprint Retrospective meetings) or Kanban, with requirements and backlogs over JIRA.
• Experience utilizing PowerShell/ Bash/ Perl or Python to automate complex manual tasks.
• Experience with scripting to automate tasks on Endpoint Detection and Response (EDR) tools.
• Experience utilizing centralized log and event aggregation through Splunk, ELK, or similar SIEM tool. Knowledge of Splunk if SIEM work experience is on a tool other than Splunk.
• Experience connecting security log sources, authoring alerts, and creating reports and dashboards to monitor for notable security events technologies.
• Experience analyzing large data sets
• Working experience on Change Management process/ documentation.
• Experience using team collaboration tool or portal, such as Confluence
• Knowledge and understanding of business requirements gathering and translation to technical requirements
• Knowledge and understanding of technical documentation: impact analysis, detailed designs and unit test plans
• Desired Qualifications
• Bachelors and/or Masters degree in computer science or information systems
• Experience in Endpoint Management Tools is a plus.
• CEH or other relevant certifications highly preferred
• Ability to work effectively, as well as independently, in a team environment
• Strong analytical skills with high attention to detail and accuracy
• Ability to prioritize work, meet deadlines, achieve goals, and work under pressure in a dynamic and complex environment
• Problem solving skills, ability to develop effective long-term solutions to complex problems
• Ability to prioritize work, meet deadlines, achieve goals, and work under pressure in a dynamic and complex environment
• Strong organizational, multi-tasking, and prioritizing skills
• Customer service focus with the ability to respond to requests in a timely manner
• Ability to make sound decisions and exercise good judgment
• Ability to work and achieve goals without constant supervision
• Ability to handle confidential material in a professional manner

Job Expectations:

• Evaluate and test functionalities of existing and new cyber security solutions.
• Assist with generating and delivering content and configurations for security tools that will:
• Retrieve system information from all endpoints (which includes information related to files, applications, processes, network connections, etc.)
• Detect and alert on process, configuration or file changes, and compliance checks, which should be forwarded for security event creation or further analysis by security operations teams.
• Create diagrams, Data Processing Flows, languages and standards
• Produce Functional System Design Documents
• Document solutions by writing installation, user, & troubleshooting guides
• Following DevOps development lifecycle using Agile framework
• Collaborate effectively with both technical and non-technical stakeholders
• Ability to handle confidential material in a professional manner.