Job Alert: IT Security Engineer

Position Summary

Ensures the secure operation of the in-house computer systems, servers, and network connections. This includes occasional analysis of server and firewall logs, network traffic, establishes and updates virus scans, and troubleshooting. Analyzes and resolves security breaches and vulnerability issues in a timely and accurate fashion. Conducts user activity audits to regulate access to computer data files and prevent unauthorized modification, destruction, or disclosure of information.

Essential Duties And Responsibilities

• Participates in the planning and design of enterprise security architecture
• Participates in the creation of enterprise security documents (policies, standards, baselines, guidelines and procedures)
• Provides Information Security subject matter expertise regarding the planning and design of an enterprise Business Continuity Plan and Disaster Recovery Plan
• Maintains up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors
• Evaluates and recommends additional security solutions or enhancements to existing security tools to improve overall enterprise security
• Participates in the planning, deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions
• Maintains up-to-date baselines for the secure configuration and operations of all in-place devices (i.e., security tools, workstations, servers, network devices, etc.) through anti-virus, spam, and malware administration and management, including security applications and hardware
• Conducts vulnerability assessments, penetration tests and security audits
• Reviews security alerts and vulnerabilities, and communicates accordingly with appropriate department leaders and data owner and managers; reviews agency information systems and provides written reports of potential security risks and recommended solutions
• Oversees management reporting regarding the IT departments overall network security program
• Participates in the incident reporting and incident response processes and procedures to address security incidents and breaches, and reports of violation of policy; serves as a point of contact for information security inquiries and audits
• Collaborates with the Network Engineering team regarding network security, including firewall administration, web proxy administration, and intrusion detection/prevention systems
• Creates and maintains documentation of network security configurations and processes
• Participates as a senior member of the Security Operations Center (SOC) in the effective detection, analysis, containment, and eradication of attacks
• Works with internal and external project managers to complete projects on time, and leads or participates in IT projects to provide information security expertise, guidance, or training
• Mentors junior members of the team as needed

Qualifications

• Required: High School Diploma or GED
• 5+ years of IT experience with a focus on governance, security incident response, and compliance required
• Preferred: Post-secondary degree
• One or more of the following certifications: GIAC Security Fundamentals, Certified Information Systems Security Professional (CISSP), Cisco Certified Security Professional (CCSP), Cisco Certified Network Professional-Security (CCNP-Security), CEH, CISM, CIA
• Experience preferred on the following: Anti-Virus, Spam and Malware Tools, Management and Administration, Incident Response Practices and Procedures, Firewall Management and Administration, Security information & Event Management (SIEM) and Logging, Vulnerability Assessment Practices/Technology (i.e., Operating Systems, Network, Application, Database, and Web), Penetration testing ability and knowledge, Security Industry Standards, such as ISO, NIST, FISMA, and PCI, Information Security Policy and Standards, Information Security Risk Assessment and Audits, Computer Forensic Practices and Procedures, Scripting knowledge (python, Perl, some shell, Linux scripting)
• Experience preferred with McAfee, Cisco, Juniper, Sourcefire, Symantec, Qualys, Orion, Lieberman, SIEM tools (all: or similar products)