Security Engineer

About the role

This role serves as a leader within Met Council Information Security team and plays several key roles. Resources are responsible for implementing, configuring, tuning, and supporting a full suite of information security tools and services used at the Council.

Responsibilities

• Implement, configure, and tune security tools and services used at the Council.
• Monitor threat landscape; recommend technologies and controls to address emerging risks.
• Integrate security solutions with infrastructure and applications; maintain runbooks.
• Perform health checks, upgrades, and patching; validate detections and coverage.
• Collaborate with IS teams to embed security by design; provide thought leadership.
• Document configurations and operational procedures; support audits and compliance.
• Provide knowledge transfer

Qualifications

• Advanced certifications such as CISSP, CISM, CCSP, OSCP, or equivalent.
• 5 years of experience in Security role
• 3 years of experience with security frameworks and compliance standards such as NIST, CJIS, HIPAA, PCI, GDPR, and CIS Controls.
• 3 years of experience working within zero-trust, cloud security, identity and access management (IAM), endpoint protection, and/or network segmentation.
• Experience in identity governance, privileged access management, and multi-factor authentication solutions.