Senior Security Engineer - Job ID 3104

About the role

Iconectiv is dedicated to advancing and protecting the nation's communications ecosystem through trust. Our work ensures the reliability, choice, and convenience of modern communications.

Responsibilities

• Platform Security Monitoring and Analytics
• Oversight and performance of Security Engineering tasks and functions
• Development and maintenance of application security services for lab and production environments
• Supporting number porting services for the NPAC (Number Porting Administration Center)
• Securing existing systems and applications
• Evaluating the security of third-party applications, host systems, development software, devices, and technologies for vulnerabilities
• Developing requirements for related security solutions

Requirements

• Available to support changes and maintenance windows, as needed and required (off-hours)
• Assist with incident response and potential breach activities, on a 24x7 schedule, if necessary
• Conduct security assessments to identify vulnerabilities in existing systems
• Design and implement security measures to protect against potential threats
• Develop, implement, and manage security policies and procedures
• Test, evaluate, deploy, and configure security products and solutions
• Administer and support security platform components including: SIEM, HIDS, NIDS, FW, WAF, etc.
• Create and update SIRP response plans and lead incident response teams
• Maintain system, network, and application activity for signs of unauthorized access or malicious activity
• Perform security audits and risk assessments

Additional Skills

• Information security engineering subject matter expert
• Strong analytical and problem-solving abilities
• Effective communication and collaboration skills to work with cross-functional teams
• Analyze threats and attacks reported from multiple sources both internal and external
• Knowledge of operating systems, virtualization, and database platforms
• Operating systems: Enterprise Linux, Solaris, Windows
• Virtualization: VMware, LDOMs, OVM
• Scripting and /or development ability to integrate, enhance, or customize existing security tools
• Oracle Database, security auditing and logging
• Knowledge of network devices, security solutions, and technologies
• Network, System, and Application event reporting and logging
• Understanding configuration policy changes for router, switch, firewall, load balancing, updates, upgrades, and lifecycle management
• Expertise in configuring and managing firewalls, intrusion detection systems, and other security devices
• ACL creation, update, and review
• SIM, event log processing, correlation, alarming, and reporting
• WAF policy development and tuning
• NIDS policy development and tuning
• Endpoint monitoring and controls, FIM, HIDS, EDR
• Application security review and assessments
• Experience with vulnerability assessment and penetration testing
• Vulnerability scanning, scan development and tuning, review and reporting, develop and support remediation plans
• Manage penetration test engagements, review findings, and manage remediation efforts
• Knowledge of security frameworks and industry best practices
• Knowledge and/or experience with the following security applications are a plus – Wazhu, QRadar, Fortinet, CrowdStrike, QLIK, RedSeal, and Tenable Security Center/Nessus

Pay

The final pay offered to a successful candidate will be between $105k- $151k, depending on various factors such as experience, industry, education, and geographic region. Variable pay (bonus) is also eligible.

Benefits

• Medical, dental, vision, disability (short and long term), and basic and supplemental life insurances
• Participation in Company’s 401k plan with Company Matching and Automatic Contributions
• Annual allotments of paid time off in the form of Vacation Days, Floating Holidays, Personal Business Days, a Volunteer Day, as well as paid holidays and paid sick leave