Security Engineer

Job Summary

The Security Engineer will analyze and make recommendations to improve network, system and application architectures.  This role will assist in the review and update of cyber security policies, architectures and standards and assist in responding to audits, penetration tests and vulnerability assessments.

Duties & Responsibilities

• Research, design, and implement cyber security solutions for organization systems and products that comply with all applicable regulations, security policies and standards
• Work with IT and internal and external business partners to ensure that security is factored in the evaluation, selection, installation and configuration process of hardware and software
• Analyze and make recommendations to improve network, system and application architectures
• Assist in the review and update of cyber security policies, architectures and standards
• Assist in responding to audits, penetration tests and vulnerability assessments
• Assist with performing an Information Security risk assessment including development of risk mitigation strategies to resolve vulnerabilities and recommend security changes to system or system components as needed
• Define and document how the implementation of a new system or new interfaces between systems impacts the security posture of the current environment
• Prepare materials (reports, presentations, spreadsheets, etc.) on Information Security to help develop scenarios, response procedures, and to enable informed decision-making
• Participate in the evaluation of products, services, and/or procedures
• Support the analysis of underlying trends and action plans associated with Information Security and other domains

Experience & Education Requirements

• Associate’s Degree in Information Security or equivalent experience
• Awareness of Information Security, compliance, and/or other security standard methodologies and principles
• 0-3 years of experience with information technology (IT) security principles and methods (e.g., firewalls, DMZs, encryption)
• Knowledge of cybersecurity and privacy principles
• Experience with security data analysis, including UEBA, using analytic such as Excel, SQL, SOAR, SIEM tools, and other query languages

Preferred Requirements

• Security certifications (Security+)
• ITIL, and/or GIAC certification

Skills & Abilities

• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
• Dedicated work ethic
• Strong work prioritization and planning skills
• Strong troubleshooting and problem-solving skills
• Strong interpersonal communication skills, written and verbal