Security Engineer III

JOB SUMMARY

The Security Engineer III role is part of the Enterprise Security Services (ESS) team in the Information Technology Department.

This is an active role that involves maintaining the enterprise security defenses, responding to incidents as needed, and coordination with technology vendors to ensure the implemented solutions operate within Trellis' risk management framework.

This role is responsible for designing, building, testing, and implementing security systems within the Trellis IT network.

The Security Engineer IV will understand complex IT systems and apply industry best security practices to secure Trellis information resources.

The role is Hybrid Remote/On-Site with occasional onsite presence required.

ESSENTIAL DUTIES AND RESPONSIBILITIES

This role is expected to perform the following essential duties and responsibilities of the position with reasonable accommodation.


* Supports setting technology strategy in conjunction with software engineering, existing infrastructure, and future business needs.


* Oversees and runs the Trellis Security Operations Center (SOC) functions.


* Conducts root-cause analysis and incident reviews.


* Monitors and responds to system security alerts.


* Creates and tunes detection rules, leads threat hunts.


* Analyzes system security logs across a diverse ecosystem (proxy, operating systems, internally developed web apps, software-as-a-service apps (SaaS), and cloud infrastructure) utilizing a Security Information and Event Management (SIEM).


* Works with IT management to improve operational efficiency and effectiveness.


* Conducts research and case studies on leading edge technologies and makes determinations on the suitability for use in the Trellis environment.


* Automates phishing defenses, network device security configurations, and baseline compliance.


* Responds to and resolves security tickets.


* Develops, executes, and tracks the performance of security measures to Trellis information resources.


* Identifies, defines, and documents system security requirements and recommends solutions to management.


* Advises Information Security Officer (ISO) on policy and procedural recommendations, incident courses of action, technology considerations, security budget recommendations, and daily information security issues.


* Performs software updates for security infrastructure devices.


* Acts as a good steward of Trellis' resources to ensure control of IT budgets.


* Supports information technology management in establishing Trellis' technical vision and supports all aspects of the company's technological development.


* Provides support to incident response, suspicious email analysis, disaster recovery, audit artifact generation, information/technology risk assessments, and security configuration as well as procedural recommendations for Trellis IT projects.


* Provide technical assistance to IT staff in defining a...