Information Security Engineer III

Responsibilities

• Lead the design and management of security technologies, including but not limited to firewalls, proxy systems, logging, and other security devices
• Provide security technology expertise to the organization; participate in and consult on projects
• Advise other IS teams on best practices for security design
• Execute tasks related to tickets and service requests for advanced to complex activities
• Oversee the maintenance of security systems, including firewalls, proxy systems, logging, and other security devices, and vendor provided services
• Analyze business needs; partner with leaders across the organization in order to research and recommend solutions which balance business need and risk mitigation
• Define, build, and review reports on information security system performance and event anomalies
• Author and serve as subject matter expert to define requirements and standards for information security
• Monitor and continually review existing systems to ensure they are designed to comply with established standards and to empower business operations
• Lead the planning for and support of disaster recovery and business continuity initiatives
• Conduct product and vendor research, and present recommendations to management
• Manage relations with vendors and equipment suppliers, including installation and repair of services
• Perform work in alignment with the organization’s mission, vision, and values

Requirements

• Minimum 5 years’ experience delivering information security solutions and related services
• Advanced knowledge of data loss prevention (DLP)
• Intrusion Detection systems (IDS)
• Intrusion Prevention systems (IPS)
• Expert troubleshooting of system performance issues and root cause
• Expert knowledge of network transport protocols and industry standards
• Strong process-orientation with knowledge of ITIL concepts
• Knowledge of Vulnerability Management systems and processes
• Knowledge of Security Incident and Event Management (SIEM) systems
• Ability to program using scripting languages like Python, Powershell, VB, C++, and/or others
• CISSP, CASP+, GIAC certifications (GSEC, GCIA, GCIH, GPEN, etc.), CCSP, CISM, Security+, Microsoft Security certifications (SC-100, SC-200, AZ-500)
• Additional experience in related technology support and/or operational positions

Hard Skills

• Intrusion Prevention Systems (IPS)
• Network Transport Protocols
• Vulnerability Management
• Scripting Languages (Python, Powershell, VB, C++)
• System Performance Troubleshooting

Soft Skills

• Process Orientation
• Collaboration

Certifications & Qualifications

• CISSP
• CASP+
• GIAC (GSEC, GCIA, GCIH, GPEN)
• CCSP
• CISM
• Security+
• Microsoft Security Certifications (SC-100, SC-200, AZ-500)