IT Security Engineer, Full-time

The IT Security Engineer is responsible for establishing an enterprise security stance through policy, architecture, and training processes and directing staff to ensure best practices in information security and adherence to regulatory and compliance requirements.

Responsible for designing, implementing, and maintaining network security measures to protect our organization's infrastructure, including firewalls, proxies, DNS, WiFi, and networking systems.

As a Security Engineer, you will ensure the confidentiality, integrity, and availability of our systems and data by developing and implementing strategies to protect against cyber threats.

Other tasks will include selecting appropriate security solutions, and managing and overseeing any vulnerability audits, risk assessments, and other IT security projects and audits.

The IT Security Engineer is expected to interface with peers in the Systems, Network, Application, and Analytics departments to share the corporate security vision with those individuals and solicit their involvement in achieving higher levels of enterprise security through information sharing and cooperation.

Responsibilities:

Strategy & Planning


* Working with IT Security and maintaining the enterprise’s security architecture design.


* Maintain the enterprise’s security awareness training program.


* Maintain the enterprise’s security documents (policies, standards, baselines, guidelines, controls, and procedures).


* Maintain action plans resulting from Risk Assessments and other IT audits.


* Maintain IT Business Impact analysis.


* Maintain the IT Disaster Recovery Plan.


* Develop IT governance mechanisms for enforcing the policies that support the protection and availability of data as well as risk mitigation.


* Maintain the Change Control process.


* Manage projects related to IT security and Governance.

Acquisition & Deployment


* Maintain up-to-date knowledge of the IT security industry, including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.


* Select and acquire additional security solutions or enhancements to existing security solutions to improve overall enterprise security per the enterprise’s existing procurement processes.


* Oversee the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.


* Review new software and technology acquisitions for security risk.


* Manage change control processes and communicate changes appropriately.

Operational Management


* Design, implement, and manage network security measures, including firewalls, proxies, and DNS, to protect our organization's systems from unauthorized access and cyber-attacks.

IDS/IPS and Layer 7 ...