Security Engineer

• Performs risk assessments, vulnerability management, penetration testing and remediation recommendations for cloud based technologies and applications.
• Works closely with engineering teams to proactively identify and fix security flaws and vulnerabilities.
• Works with analysts to define the functional and technical needs of an organization and recommends solutions.
• Assesses available technologies to meet needs, and then defines technical specifications and designs.
• Develops and modifies technology systems, addressing functional, performance, security, quality, operations and monitoring needs.
• Deploys and integrates system monitoring and detections for malicious activity for cloud environments with existing SIEM solution.
• Works with IT Teams to grow and implement organizational security standards and provide security recommendations for services.
• Participates in infrastructure and application architecture reviews and management, as well as provides guidance on security best practices and recommendations.
• Performs analysis of security events and logs.
• Performs security reviews of existing network infrastructure deployments to identify security gaps or vulnerabilities and recommend and prioritize remediation actions.
• Engages in incident response activities.
• Provides guidance on data analysis and reporting including use of complex analysis or machine learning.
• Integrates and builds upon existing automation, security operations, and monitoring systems.
• Stays abreast of security development practices including the research of current and evolving trends.
• Demonstrates good judgment in selecting methods and techniques for obtaining solutions.
• Provides support and troubleshooting of prior developed technology solutions.
• Ensures work is completed in such a way to comply with established compliance and other internal controls.

SUMMARY OF REQUIREMENTS:

• Minimum of four (4) years of related experience in various network security development technologies and practices.
• Professional experience with a architectural understanding of network security and application security.
• Experience with work on complex issues where analysis of situations or data requires an in-depth evaluation of variable factors.
• Strong knowledge of networking concepts, protocols (TCP/IP, HTTP, DNS, TLS) and technologies including firewalls, TLS, IDS/IPS system, cryptographic systems, identity management systems, RADIUS, etc..
• Experience with programming/scripting (Python/Perl/bash/etc.).
• Strong understanding of networking topologies and protocols.
• Experience working in multiple security domains with a focus on risk based analysis of anomalies, detection and response.
• Proven experience with work on complex security issues where analysis of situations or data requires an in-depth evaluation of variable factors.
• Requires working knowledge and experience in own technical job family and broadens capabilities; has worked with and is proficient with current technologies.
• Requires expanded knowledge in own job family and broadens capabilities.
• Undergraduate degree in Computer Science, a related field, or equivalent.