Information Security Engineer

About the Role

Plans, designs, and builds security architectures for the organization. Implements network and computer security and ensures compliance with information security policies and procedures.

Responsibilities

• Initiates security response procedures when a problem is detected, including resolving incident tickets.
• Updates Computer Security Incident Response Team (CSIRT) documentation and procedures.
• Writes code or script to automate, monitor, and test security solutions.
• Assists in designing, building, configuring, and maintaining cybersecurity threat defense capabilities and user access management.
• Maintains cybersecurity requirements for network, system, and/or application technologies.
• Configures and installs security technologies, such as firewalls, intrusion detection systems, and access controls, and implements software fixes to remove system vulnerabilities.
• Performs daily reviews of operating system and network changes and works with system engineers to deploy patches and address vulnerabilities.
• Manages security objects, including SSL Certificates, PGP and private keys, system passwords, anti-virus applications, spyware and malware solutions, and identity management.

Qualifications

• Bachelor’s degree in computer science or a related field.
• 2+ years of cybersecurity engineering experience.
• Security-centric certification, such as Security+ or Certified Ethical Hacker (CEH).

Typically requires BS/BA in a related discipline. Generally 2-5 years of experience in a related field OR MS/MA and generally 2-4 years of experience in a related field. Certification is required in some areas.

Work Environment

• Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
• Most of the time is spent sitting in a comfortable position with frequent opportunity to move about. On rare occasions, there may be a need to move or lift light articles.
• Typically requires overnight travel 5% to 20% of the time.

Nature of work requires increasing independence; receives guidance only on unusual, complex problems or issues. Work review typically involves periodic review of output by a supervisor and/or direct customers of the process.

May provide general guidance/direction to or train junior level support or professional personnel.

Demonstrates skill in data analysis techniques by resolving missing/incomplete information and inconsistencies/anomalies in more complex research/data.