Security Engineer

Role Summary

The Security Engineer will design, install, administer, document, and maintain enterprise security systems.  This position will be responsible for providing specifications, analyzing, and recommending solutions to problems, and providing specifications for new products and services. The Security Engineer will be expected to deliver results via projects, implementations, operations, and support.  All activities will be performed in support of the strategy, vision and values of JE Dunn.

• Autonomy & Decision-Making: Makes decisions on routine matters, provides recommendations to supervisor and refers all exceptions to supervisor.
• Career Path: Senior Security Engineer

Key Role Responsibilities - Core

SECURITY ANALYST FAMILY - CORE

• Analyzes security logs to identify threat events; triage and respond accordingly to security incidents following internal security protocols.
• Configures security controls in multiple protection systems and IT infrastructure in accordance with policy, standards, and procedures.
• Tests network security controls; coordinating remediation efforts and closure of any identified issues.
• Works with various internal teams to test, discover and resolve vulnerabilities.
• Acts as first line of support for triage and remediation of support tickets related to security and tracks ongoing support issues.
• Stays current with IT security trends and standards through local special interest group involvement and monitoring online information sources.
• Responsible for asset management of enterprise security inventory, excluding end user devices.
• Facilitates administrator and end-user IT security training.
• Manages questionnaires related to third-party vendor security management.
• Stays current with released security features of internal IT systems and software.
• Maintains confidentiality and integrity in dealing with sensitive information systems and processes.

Key Role Responsibilities - Additional Core

SECURITY ENGINEER

In addition, this position will be responsible for the following:

• Acts as escalation contact and subject matter expert for information security and related solutions.
• Mentors team members on technical and security methodology characteristics.
• Assists with automation and orchestration scripting for security operations efficiency and effectiveness.
• Acts as primary technical resource for design and implementation projects.
• Drafts and recommends operating procedures and changes to information security practices and solutions.
• Trains and engages operations and support personnel on security solutions.
• Advises on trends, threats, and emerging security risks, relevant to the organization.
• Engineers effective solutions that securely enable and protect in alignment with our organization compliance requirements.
• May be a subject matter expert for a variety of security related systems or applications.
• Communicates with operational groups for collaboration of security program management.
• Advocates secure culture and provides education throughout the appropriate client group.
• Improves maturity capability of processes, procedures, and operations of the security program.
• Communicates intelligence and program effectiveness reports to supervision.

Knowledge, Skills & Abilities

• Ability to perform work accurately and completely, and in a timely manner
• Communication skills, verbal and written – Intermediate
• Ability to manage and lead technical projects
• Working knowledge of NIST cyber security framework, defense federal acquisition regulation supplement, and ISO 270XX
• Ability to solve technical issues - Advanced
• Demonstrated expert knowledge of information security practices
• Substantial knowledge of Python and Powershell scripting languages
• Proficient with multiple IT platforms including Microsoft Windows, Linux, iOS, Cisco Networking, Cisco firewalls, intrusion detection and load balancers
• Technical writing and documentation skills
• Organizational skills
• Ability to quickly and effectively solve complex problems
• Ability to deliver quality through attention to detail
• Ability to work in team and independently
• Ability to work a flexible schedule – might be on call in the evenings and weekends
• Ability to build relationships and collaborate within a team, internally and externally

Education

• Bachelor’s degree in information security or related field (Preferred)
• In lieu of the above requirements, equivalent relevant experience will be considered

Experience

• 5+ Years information security experience (Preferred)