Security Engineer

Job Posting End Date:

Deadline to apply is 11:59 PM on

Job Title:

Contract Type:

Annual Salary:

(Support staff salary will be based on internal equity and experience)

Location:

Job Description Summary:

The Position:

Position General Summary:

The Security Engineer is responsible for ensuring that we have the right software, hardware, and platforms to help ensure that sensitive data is kept confidential. The Security Engineer will work independently and on cross-functional teams to document and report security risks and prevent security threats from being carried out.

Essential Position Functions:

• Provide analysis, deployments, and configuration management of security systems and applications, including policy assessment and compliance tools, network security assessment tools, vulnerability and web application vulnerability scanning/management, and host-based security systems.

• Work with internal and external teams and business partners to ensure that security is factored in the evaluation, selection, design, installation, configuration, and testing processes of hardware, software, and cloud products.

• Research, design, and implement security solutions to mitigate risk and prevent threats.

• Assist with the creation, review, and maintenance of best practices and security standards.

• Support data encryption deployments, including key management.

• Perform system security deployments on designated technology platforms, including operating systems, applications, and network security devices, according to the defined policies, standards and procedures, industry best practices, and vendor guidelines.

• Assist with audits, penetration tests, and vulnerability assessments, in some cases followed by appropriate remedial action, to ensure that systems are protected from known and potential threats and are free from known vulnerabilities.

• Participate in On-Call rotation for after-hours support.

• Assist and train team members in the use of security tools, the preparation of security reports, and the resolution of security issues.

• Meet professional obligations through efficient work habits such as, meeting deadlines, honoring schedules, coordinating resources and meetings in an effective and timely manner, and demonstrate respect for others

• All work responsibilities are subject to having performance goals and/or targets established

(These essential functions are not to be construed as a complete statement of all duties performed. Employees will be required to perform other job related duties as required.)

Minimum Requirements:

Education/Licensure/Certification:

• Four years IT/security experience.

• One or more certifications such as CISSP, GSEC, CEH, or CISM, preferred.

• Bachelor’s Degree in computer science, information systems, or business administration, preferred.

Experience:

• Four years’ analyzing enterprise-class systems

• Four years’ Server operating systems experience, preferably Windows Server or Red Hat Enterprise Linux

• Four years’ network security experience, preferably VPN, firewall, network monitoring, intrusion detection, server security, web application security, or wireless security

• Three years’ Public Cloud experience with Infrastructure as a Service, Platform as a Service, or Software as a Service

Knowledge, Skills, and Abilities (KSA's):

• Strong knowledge of information security principles, including risk assessment and management, threat and vulnerability management, incident response, and identity and access management

• Strong knowledge of common vulnerabilities and exploitation techniques

• Proficiency with at least one scripting language such as Python or PowerShell

• Experience in developing, documenting, and maintaining security procedures

• Knowledge of IT infrastructure, including routers, switches, firewalls, servers, storage, virtualization, and associated network protocols and concepts

• An understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business

• An understanding of organizational mission, values, and goals and consistent application of this knowledge

• Strong written and verbal communication skills

• Strong interpersonal skills

• Excellent customer service skills

• Strong organizational skills

• Ability to understand and follow verbal and written instructions

• Demonstrative skill in attention to detail

• Ability to function effectively in a high demand environment

• Ability to work independently and as a team member

• Working knowledge of general office practices, methods, and equipment, including computer skills in Microsoft Office suite of products

• Ability to compile, review, categorize, prioritize, analyze and interpret data and/or information

CORE COMPETENCIES FOR SUCCESS:

JOB KNOWLEDGE AND SKILLS

Team member carries out essential job functions with accuracy, engages in ongoing and relevant professional learning, applies new knowledge effectively, and demonstrates mastery of job-specific skills

PRODUCTIVITY

Team member produces high quality work, meets organizational and departmental deadlines, balances multiple responsibilities, manages time effectively, and seeks ways to improve processes and productivity

COMMUNICATION

Team member communicates clearly in written and verbal formats, collaborates effectively, demonstrates professionalism in all interactions, exhibits strong interpersonal skills, and contributes to a positive team and professional community

CUSTOMER FOCUS

Team member addresses the needs of internal and external customers, analyzes problems effectively, contributes to innovative solutions, seeks opportunities for improvement, and successfully adapts to change

Physical Requirements and Environmental Conditions:

• Frequency of travel: Frequent travel is required for meetings, trainings, and conferences; location may vary and may require overnight stays

• Light physical activities and efforts required working in an office environment

(Reasonable accommodations will be made in accordance with existing ADA requirements for otherwise qualified individuals with a disability.)