POSITION SUMMARY
The Senior Information Security Engineer position will work both independently and as part of a team to ensure our security posture by designing, implementing, and maintaining our security toolsets. In addition, you will help foster collaboration with IT teams, management, and other stakeholders to promote and embed security throughout the organization.
ESSENTIAL REQUIREMENTS
- Develops and leads incident response strategies.
- Safeguards our integration of AI by identifying and mitigating risks.
- Assesses our current cloud security and propose improvements or solutions.
- Serves as a subject matter expert for security tools, applications, and processes.
- Leads SIEM platform management, log integrations, and detection engineering.
- Champions the integration of cutting-edge security technologies, strategies, and best practices.
- Participates in project initiatives to ensure security alignment.
- Maintains awareness of latest trends and developments within an everchanging threat landscape.
- Provides advanced technical guidance and training to team members.
- Tracks remediation and follow-up of audit and assessments.
- Conducts regular security assessments.
- Proactively identify security gaps and work with both management and staff to address those gaps through processes, policies, or technology.
- Creates detailed design drawings and documentation for implementations, procedures, and remediation plans.
- Regular and predictable attendance is an essential requirement of the position.
- Responsible for the completion of all compliance training related to the position and continuing professional education to maintain professional security certifications.
- Understands all applicable laws and regulations that apply to the position and comply with the requirements.
NON-ESSENTIAL FUNCTIONS
Perform all other duties as assigned.
EXPERIENCE/SKILLS
Required:
- Five (5) years of experience in security engineering with a strong emphasis on SOAR, detection, and response.
- Seven (7) to ten (10) years of experience in various security domains (e.g., security operations, network security).
- Experience creating solutions to enhance visibility, alerting, and reducing risk within IaaS, PaaS, SaaS, and M365 environments.
- In-depth knowledge of M365 security features and capabilities, with a focus on threat protection, data loss prevention, and compliance.
- Proven experience with tools such as: Nessus, Nmap, BurpSuite, Metasploit, Responder, CrackMapExec, Certipy, Impacket, and Bloodhound as well as an in-depth knowledge of open-source security projects and tools.
- Excellent communication and collaboration skills with IT partner teams, business units, and leadership.
- Excellent analytical and problem-solving skills to identify, assess, and mitigate security risks.
- Solid foundational understanding of networking concepts.
Preferred:
- Three (3)+ years of experience in the banking or financial services industries.
- Experience with vulnerability assessment and penetration testing.
- Experience with a wide range of Azure security architecture, services, and tools.
- Strong understanding of security frameworks and compliance regulations (e.g., NIST, PCI DSS).
- Knowledge of cloud service providers and their various technologies and services.
- Intermediate scripting/programming proficiency in various languages, with a preference for Python, for security orchestration, automation, and code analysis.
- Strong organizational and time management skills.
- Strong leadership and project management skills.
- Strong documentation and report writing skills.
- Ability to handle multiple tasks in a fast-paced environment.
EDUCATION
Bachelor’s degree in Cybersecurity, Computer Science, or related discipline preferred.
CERTIFICATIONS
Security certifications such as CISSP, CISM, CEH, OCSP or equivalent preferred.
TRAVEL REQUIREMENTS
Ability to travel to all locations as needed for meetings, projects, seminars, etc.
PHYSICAL DEMANDS
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job Reasonable accommodations may be made to enable individuals to perform the essential functions.
While performing the duties of this job, the employee is regularly required to use hands and fingers to operate keyboard and other office equipment; reach with hands and arms; and talk or hear. The employee frequently is required to sit, stand and walk. The employee is occasionally required to stoop or kneel. The employee may occasionally lift and/or move up to 10 pounds.
EQUIPMENT
MS Office, PC, phone, and standard office equipment.
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights (https://www.eeoc.gov/poster) notice from the Department of Labor.
