Sr. Security Engineer
for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. The posting includes Overview (which could be About the role). Responsibilities are listed. Qualifications are listed. There's also maybe Skills? The qualifications list includes many items; could be considered Requirements or Qualifications. We need to decide sections.
We have Overview paragraph: "Manages security operational systems responsible for threat monitoring, detection, and response. Leads efforts for vulnerability remediation and reduce overall risk. Responsible for a broad range of tasks including administration of information security tools and devices, security information and event management. Possesses and applies a broad knowledge of cyber security practices and procedures to complete assignments with integrity and creativity in collaboration with team. Anticipates job expectations and contributes to sustainable project solutions."
That's about the role. So we can have About the role
with that paragraph.
Responsibilities: a long list. We'll put Responsibilities
with - each bullet.
Qualifications: includes education, certifications, experience, etc. We'll put
Qualifications
with - .
Skills: maybe we can extract from qualifications some skill items like "Strong customer service, interpersonal skills..." etc. But we could also treat those as part of Qualifications. The instruction: prefer a few substantive sections over many thin ones. So we could combine Qualifications and Skills into one Qualifications section. But we have both headings possible. Since qualifications already includes skill-like items, we can just have Qualifications.
We need to avoid repeating job title. No Job ID. No boilerplate like EEO etc. Remove that line at end: "HKS is an EEO/AA Employer: M/F/Disabled/Veteran". Also remove "If you currently work for HKS, please submit your application via the Internal Careers Portal." That's application instruction, remove.
Also remove "Overview" heading? We'll not use heading for Overview; we'll just put content under About the role.
We need to preserve all substantive information. Let's extract responsibilities list exactly as given. The responsibilities paragraph is a long sentence with many items separated by commas and maybe semicolons. We need to split into list items. The text: "Engineers, implements, and advocates for effective security operation standards and controls, including security monitoring, threat detection, incident response, threat intelligence, vulnerability management, access management, compliance and reportingDevelops and implements a comprehensive vulnerability management program, and proactively identifies and analyzes emerging threats and vulnerabilitiesLeads efforts to remediate security weaknesses and improve overall security postureLeads incident response investigations, performs root cause analysis, and develops comprehensive incident reportsRecommends and implements improvements to incident response processes and procedures while mentoring junior team members in incident handling techniquesLeads the development, implementation, and maintenance of security documentation, including policies, standards, procedures, and guidelinesEnsures documentation is aligned with industry best practices, regulatory requirements, organizational needs, and provides guidance and training to other team members on security documentation standardsDevelops and implements a comprehensive security reporting framework that aligns with business objectives and regulatory requirementsLeads the creation of executive-level security reports, providing strategic insights and recommendations to senior managementOversees the development and maintenance of security dashboards and metrics to track key performance indicators (KPIs) and ensures that security reporting is accurate, timely, and relevant to the needs of the audienceDevelops and implements a comprehensive security awareness program that aligns with industry best practices and regulatory requirementsLeads the creation of engaging and informative training content, including interactive modules, videos, and simulationsOversees the execution of phishing campaigns and analyzes results to identify vulnerabilities and improve training effectivenessProvides guidance and mentorship to junior engineers on developing and delivering security awareness trainingProvides expert guidance and advice to other IT teams on security architecture, design, and implementationLeads security reviews and audits of IT projects and initiatives and develops and delivers security awareness training programs for IT staffMentors a team responsible for incident detection, response, mitigation, and retrospection, ensuring adherence to industry standards and best practicesChampions security best practices across all IT teams and provides expert guidance to other IT teams on security architecture, design, and implementationLeads incident response efforts, conducts in-depth analysis of complex threats, develops and implements remediation strategies while mentoring junior engineers and contributes to security documentation and process improvementDevelops and implements a comprehensive security reporting framework that aligns with business objectives and regulatory requirementsLeads the creation of executive-level security reports, providing strategic insights and recommendations to senior managementDevelops and implements a comprehensive security awareness program that aligns with industry best practices and regulatory requirementsLeads the creation of engaging and informative training content, including interactive modules, videos, and simulationsOversees the execution of phishing campaigns and analyzes results to identify vulnerabilities and improve training effectivenessProvides guidance and mentorship to junior engineers on developing and delivering security awareness trainingProactively searches for indicators of compromise and escalate findings to leadershipProvides after-hours support upon request by management on as-needed basisPerforms other duties assigned by leadershipContinuously learn and develop cybersecurity skills and knowledge and embraces a culture of continuous service improvement and service excellenceStays current on security industry trends"
We need to split into sensible bullet points. There's duplication (some repeated). We should preserve all substantive information but not invent. Duplication is present in source; we could keep duplicates? The instruction: "Preserve ALL substantive information; do NOT invent or summarize away detail." It doesn't say to deduplicate. But we could keep as is; duplicates are part of source. However, to avoid overly long list, we could keep them as they appear. But we need to split into items. The source lacks clear delimiters; we can split at each capital letter start of a new sentence? Might be messy.
Simplify: we can keep responsibilities as a single paragraph
preserving the text. The instruction says use
- for any list of duties/requirements/benefits. If we treat responsibilities as a list, we should use
- . But if we keep as paragraph, we might violate instruction. However, the instruction: "Use
- for any list of duties/requirements/benefits, and
for prose." The responsibilities section is a list of duties; we should use list. But we need to parse into items.
We could split by periods that end a sentence. Let's attempt to split manually:
1. Engineers, implements, and advocates for effective security operation standards and controls, including security monitoring, threat detection, incident response, threat intelligence, vulnerability management, access management, compliance and reporting
2. Develops and implements a comprehensive vulnerability management program, and proactively identifies and analyzes emerging threats and vulnerabilities
3. Leads efforts to remediate security weaknesses and improve overall security posture
4. Leads incident response investigations, performs root cause analysis, and develops comprehensive incident reports
5. Recommends and implements improvements to incident response processes and procedures while mentoring junior team members in incident handling techniques
6. Leads the development, implementation, and maintenance of security documentation, including policies, standards, procedures, and guidelines
7. Ensures documentation is aligned with industry best practices, regulatory requirements, organizational needs, and provides guidance and training to other team members on security documentation standards
8. Develops and implements a comprehensive security reporting framework that aligns with business objectives and regulatory requirements
9. Leads the creation of executive-level security reports, providing strategic insights and recommendations to senior management
10. Oversees the development and maintenance of security dashboards and metrics to track key performance indicators (KPIs) and ensures that security reporting is accurate, timely, and relevant to the needs of the audience
11. Develops and implements a comprehensive security awareness program that aligns with industry best practices and regulatory requirements
12. Leads the creation of engaging and informative training content, including interactive modules, videos, and simulations
13. Oversees the execution of phishing campaigns and analyzes results to identify vulnerabilities and improve training effectiveness
14. Provides guidance and mentorship to junior engineers on developing and delivering security awareness training
15. Provides expert guidance and advice to other IT teams on security architecture, design, and implementation
16. Leads security reviews and audits of IT projects and initiatives and develops and delivers security awareness training programs for IT staff
17. Mentors a team responsible for incident detection, response, mitigation, and retrospection, ensuring adherence to industry standards and best practices
18. Champions security best practices across all IT teams and provides expert guidance to other IT teams on security architecture, design, and implementation
19. Leads incident response efforts, conducts in-depth analysis of complex threats, develops and implements remediation strategies while mentoring junior engineers and contributes to security documentation and process improvement
20. Develops and implements a comprehensive security reporting framework that aligns with business objectives and regulatory requirements (duplicate of #8)
21. Leads the creation of executive-level security reports, providing strategic insights and recommendations to senior management (duplicate of #9)
22. Develops and implements a comprehensive security awareness program that aligns with industry best practices and regulatory requirements (duplicate of #11)
23. Leads the creation of engaging and informative training content, including interactive modules, videos, and simulations (duplicate of #12)
24. Oversees the execution of phishing campaigns and analyzes results to identify vulnerabilities and improve training effectiveness (duplicate of #13)
25. Provides guidance and mentorship to junior engineers on developing and delivering security awareness training (duplicate of #14)
26. Proactively searches for indicators of compromise and escalate findings to leadership
27. Provides after-hours support upon request by management on as-needed basis
28. Performs other duties assigned by leadership
29. Continuously learn and develop cybersecurity skills and knowledge and embraces a culture of continuous service improvement and service excellence
30. Stays current on security industry trends
We'll keep duplicates as they appear; it's preserving source.
Now Qualifications: The text after "Qualifications". Let's extract:
"B.A./B.S. degree in Computer Science or related field, or equivalent work experienceAdvanced Information Security Certification (CISSP, CISM, CASP+, CySA+, CCSP ) requiredTypically with 6+ years of experience with cyber security incident response & remediation activitiesAdvanced experience regarding all layers of the OSI modelAdvanced competency in Microsoft Server, Microsoft Intune, Office 365 and Microsoft AzureExperience with logging and altering platforms, including SIEM integrationExperience with CATO SSE Expert, CATO Advanced Security, CATO SASE Deployment and ManagementExperience in MS Office Suite, including Excel, Outlook and WordExperience with the following security solutions (Okta, Crowdstrike, Microsoft Cloud App Security, Tenable, Mimecast, Cloudflare) preferredKnowledge of Cisco network device (managed switches and routers) configurations and management supporting both LAN and WAN architecturesKnowledge of Palo Alto firewall, Prisma and SASE environmentsProven track record of unprompted consistent improvementStrong customer service, interpersonal skills and the ability to interact with all levels of staffStrong work ethic and eagerness to produce high quality, accurate resultsAbility to hold sensitive information with a high level of confidentiality and integrityAbility to communicate and present ideas in a clear, concise and professional manner both verbally and in writingAbility to proactively problem solve and apply innovative solutionsAbility to work and collaborate in a team environment, and ability to work independently and prioritize workAbility to work on multiple projects at the same timeAbility to effectively meet deadlines at expected qualityTravel may be required"
We need to split into list items. We can split by capital letters start of each new phrase after a period? There are no periods except maybe after "required". Let's manually split:
1. B.A./B.S. degree in Computer Science or related field, or equivalent work experience
2. Advanced Information Security Certification (CISSP, CISM, CASP+, CySA+, CCSP) required
3. Typically with 6+ years of experience with cyber security incident response & remediation activities
4.
Qualifications
with- .
Skills: maybe we can extract from qualifications some skill items like "Strong customer service, interpersonal skills..." etc. But we could also treat those as part of Qualifications. The instruction: prefer a few substantive sections over many thin ones. So we could combine Qualifications and Skills into one Qualifications section. But we have both headings possible. Since qualifications already includes skill-like items, we can just have Qualifications.
We need to avoid repeating job title. No Job ID. No boilerplate like EEO etc. Remove that line at end: "HKS is an EEO/AA Employer: M/F/Disabled/Veteran". Also remove "If you currently work for HKS, please submit your application via the Internal Careers Portal." That's application instruction, remove.
Also remove "Overview" heading? We'll not use heading for Overview; we'll just put content under About the role.
We need to preserve all substantive information. Let's extract responsibilities list exactly as given. The responsibilities paragraph is a long sentence with many items separated by commas and maybe semicolons. We need to split into list items. The text: "Engineers, implements, and advocates for effective security operation standards and controls, including security monitoring, threat detection, incident response, threat intelligence, vulnerability management, access management, compliance and reportingDevelops and implements a comprehensive vulnerability management program, and proactively identifies and analyzes emerging threats and vulnerabilitiesLeads efforts to remediate security weaknesses and improve overall security postureLeads incident response investigations, performs root cause analysis, and develops comprehensive incident reportsRecommends and implements improvements to incident response processes and procedures while mentoring junior team members in incident handling techniquesLeads the development, implementation, and maintenance of security documentation, including policies, standards, procedures, and guidelinesEnsures documentation is aligned with industry best practices, regulatory requirements, organizational needs, and provides guidance and training to other team members on security documentation standardsDevelops and implements a comprehensive security reporting framework that aligns with business objectives and regulatory requirementsLeads the creation of executive-level security reports, providing strategic insights and recommendations to senior managementOversees the development and maintenance of security dashboards and metrics to track key performance indicators (KPIs) and ensures that security reporting is accurate, timely, and relevant to the needs of the audienceDevelops and implements a comprehensive security awareness program that aligns with industry best practices and regulatory requirementsLeads the creation of engaging and informative training content, including interactive modules, videos, and simulationsOversees the execution of phishing campaigns and analyzes results to identify vulnerabilities and improve training effectivenessProvides guidance and mentorship to junior engineers on developing and delivering security awareness trainingProvides expert guidance and advice to other IT teams on security architecture, design, and implementationLeads security reviews and audits of IT projects and initiatives and develops and delivers security awareness training programs for IT staffMentors a team responsible for incident detection, response, mitigation, and retrospection, ensuring adherence to industry standards and best practicesChampions security best practices across all IT teams and provides expert guidance to other IT teams on security architecture, design, and implementationLeads incident response efforts, conducts in-depth analysis of complex threats, develops and implements remediation strategies while mentoring junior engineers and contributes to security documentation and process improvementDevelops and implements a comprehensive security reporting framework that aligns with business objectives and regulatory requirementsLeads the creation of executive-level security reports, providing strategic insights and recommendations to senior managementDevelops and implements a comprehensive security awareness program that aligns with industry best practices and regulatory requirementsLeads the creation of engaging and informative training content, including interactive modules, videos, and simulationsOversees the execution of phishing campaigns and analyzes results to identify vulnerabilities and improve training effectivenessProvides guidance and mentorship to junior engineers on developing and delivering security awareness trainingProactively searches for indicators of compromise and escalate findings to leadershipProvides after-hours support upon request by management on as-needed basisPerforms other duties assigned by leadershipContinuously learn and develop cybersecurity skills and knowledge and embraces a culture of continuous service improvement and service excellenceStays current on security industry trends"
We need to split into sensible bullet points. There's duplication (some repeated). We should preserve all substantive information but not invent. Duplication is present in source; we could keep duplicates? The instruction: "Preserve ALL substantive information; do NOT invent or summarize away detail." It doesn't say to deduplicate. But we could keep as is; duplicates are part of source. However, to avoid overly long list, we could keep them as they appear. But we need to split into items. The source lacks clear delimiters; we can split at each capital letter start of a new sentence? Might be messy.
Simplify: we can keep responsibilities as a single paragraph
preserving the text. The instruction says use
- for any list of duties/requirements/benefits. If we treat responsibilities as a list, we should use
- . But if we keep as paragraph, we might violate instruction. However, the instruction: "Use
- for any list of duties/requirements/benefits, and
for prose." The responsibilities section is a list of duties; we should use list. But we need to parse into items. We could split by periods that end a sentence. Let's attempt to split manually: 1. Engineers, implements, and advocates for effective security operation standards and controls, including security monitoring, threat detection, incident response, threat intelligence, vulnerability management, access management, compliance and reporting 2. Develops and implements a comprehensive vulnerability management program, and proactively identifies and analyzes emerging threats and vulnerabilities 3. Leads efforts to remediate security weaknesses and improve overall security posture 4. Leads incident response investigations, performs root cause analysis, and develops comprehensive incident reports 5. Recommends and implements improvements to incident response processes and procedures while mentoring junior team members in incident handling techniques 6. Leads the development, implementation, and maintenance of security documentation, including policies, standards, procedures, and guidelines 7. Ensures documentation is aligned with industry best practices, regulatory requirements, organizational needs, and provides guidance and training to other team members on security documentation standards 8. Develops and implements a comprehensive security reporting framework that aligns with business objectives and regulatory requirements 9. Leads the creation of executive-level security reports, providing strategic insights and recommendations to senior management 10. Oversees the development and maintenance of security dashboards and metrics to track key performance indicators (KPIs) and ensures that security reporting is accurate, timely, and relevant to the needs of the audience 11. Develops and implements a comprehensive security awareness program that aligns with industry best practices and regulatory requirements 12. Leads the creation of engaging and informative training content, including interactive modules, videos, and simulations 13. Oversees the execution of phishing campaigns and analyzes results to identify vulnerabilities and improve training effectiveness 14. Provides guidance and mentorship to junior engineers on developing and delivering security awareness training 15. Provides expert guidance and advice to other IT teams on security architecture, design, and implementation 16. Leads security reviews and audits of IT projects and initiatives and develops and delivers security awareness training programs for IT staff 17. Mentors a team responsible for incident detection, response, mitigation, and retrospection, ensuring adherence to industry standards and best practices 18. Champions security best practices across all IT teams and provides expert guidance to other IT teams on security architecture, design, and implementation 19. Leads incident response efforts, conducts in-depth analysis of complex threats, develops and implements remediation strategies while mentoring junior engineers and contributes to security documentation and process improvement 20. Develops and implements a comprehensive security reporting framework that aligns with business objectives and regulatory requirements (duplicate of #8) 21. Leads the creation of executive-level security reports, providing strategic insights and recommendations to senior management (duplicate of #9) 22. Develops and implements a comprehensive security awareness program that aligns with industry best practices and regulatory requirements (duplicate of #11) 23. Leads the creation of engaging and informative training content, including interactive modules, videos, and simulations (duplicate of #12) 24. Oversees the execution of phishing campaigns and analyzes results to identify vulnerabilities and improve training effectiveness (duplicate of #13) 25. Provides guidance and mentorship to junior engineers on developing and delivering security awareness training (duplicate of #14) 26. Proactively searches for indicators of compromise and escalate findings to leadership 27. Provides after-hours support upon request by management on as-needed basis 28. Performs other duties assigned by leadership 29. Continuously learn and develop cybersecurity skills and knowledge and embraces a culture of continuous service improvement and service excellence 30. Stays current on security industry trends We'll keep duplicates as they appear; it's preserving source. Now Qualifications: The text after "Qualifications". Let's extract: "B.A./B.S. degree in Computer Science or related field, or equivalent work experienceAdvanced Information Security Certification (CISSP, CISM, CASP+, CySA+, CCSP ) requiredTypically with 6+ years of experience with cyber security incident response & remediation activitiesAdvanced experience regarding all layers of the OSI modelAdvanced competency in Microsoft Server, Microsoft Intune, Office 365 and Microsoft AzureExperience with logging and altering platforms, including SIEM integrationExperience with CATO SSE Expert, CATO Advanced Security, CATO SASE Deployment and ManagementExperience in MS Office Suite, including Excel, Outlook and WordExperience with the following security solutions (Okta, Crowdstrike, Microsoft Cloud App Security, Tenable, Mimecast, Cloudflare) preferredKnowledge of Cisco network device (managed switches and routers) configurations and management supporting both LAN and WAN architecturesKnowledge of Palo Alto firewall, Prisma and SASE environmentsProven track record of unprompted consistent improvementStrong customer service, interpersonal skills and the ability to interact with all levels of staffStrong work ethic and eagerness to produce high quality, accurate resultsAbility to hold sensitive information with a high level of confidentiality and integrityAbility to communicate and present ideas in a clear, concise and professional manner both verbally and in writingAbility to proactively problem solve and apply innovative solutionsAbility to work and collaborate in a team environment, and ability to work independently and prioritize workAbility to work on multiple projects at the same timeAbility to effectively meet deadlines at expected qualityTravel may be required" We need to split into list items. We can split by capital letters start of each new phrase after a period? There are no periods except maybe after "required". Let's manually split: 1. B.A./B.S. degree in Computer Science or related field, or equivalent work experience 2. Advanced Information Security Certification (CISSP, CISM, CASP+, CySA+, CCSP) required 3. Typically with 6+ years of experience with cyber security incident response & remediation activities 4.
- for any list of duties/requirements/benefits, and
- . But if we keep as paragraph, we might violate instruction. However, the instruction: "Use
- for any list of duties/requirements/benefits. If we treat responsibilities as a list, we should use