Information Technology Security Engineer

The Information Security Engineer II supports the protection of the organization’s systems and information assets by monitoring security controls, administering security technologies, and responding to information security events. The position serves as an escalation resource for incident handling; supports vulnerability management, firewall, email security, and remote connectivity activities; and helps maintain security documentation and audit readiness. The role also participates in organizational projects to help ensure security standards are effectively implemented, and the organization’s security posture is maintained.
Second tier escalation point for information security incident handling which includes identifying and triaging security incidents according to the incident response plan.
Proactive monitoring of our network, access controls, and information security controls.
Perform daily system administrative tasks on security systems to ensure that our security systems are operational and high performing.
Monitor and develop log aggregation and correlation software for first response, prioritization, and escalation of security threats. This involves building and developing new techniques for catching malicious behavior on our network.
Execute phishing campaigns for the organization which include system operations of phishing tools and assists with organizational security awareness training.
Improve and maintain security documentation including data flow diagrams, network topology and security benchmarks for a variety of systems.
Maintain and respond to alerts from our anti-virus software suite.
Support mail flow on our email security gateway including analysis of quarantined email and configuration of our data loss prevention controls.
Assist with the maintenance and monitoring of our internal, external, and virtual firewall environment.
Engage in organizational projects to ensure that security standards are implemented successfully.
Executing technical security reviews of new and existing software vendors.
Participate and assist with the gathering of documentation for our 3rd party audits and regulatory audits.
Troubleshoot issues with remote connectivity for all employees and 3rd party vendors.
Build and troubleshoot IPsec VPN tunnels between 3rd party vendors including building appropriate firewall rules to maintain our existing security posture.
Bachelor’s degree (B.in Information Security, Computer Science, or a similar field and five (5) years of enterprise IT experience, including a minimum of three (3) years of information security experience, OR an equivalent combination of education and experience in lieu of a degree.
In-depth knowledge of Microsoft operating systems and Active Directory, including Windows Workstation, Windows Server, and Group Policy.
Experience with log aggregation and Security Information and Event Management (SIEM) software.
Proficient knowledge of networking concepts within layers 1 through 4 of the OSI model.
Experience managing and monitoring firewalls, responding to anti-virus alerts, and recognizing when security events require escalation.
Knowledge of the NIST Cybersecurity Framework, CIS benchmarks, security industry best practices, and their application to technical reviews of software and data center controls.
Ability to analyze security information, troubleshoot technical issues, document findings, and communicate effectively with technical and nontechnical partners.
Licenses, Training, and Certifications Required
CompTIA A+, Security+ and/or Network+
Certified Information Systems Security Professional (CISSP)
Cisco Certified Network Associate (CCNA)
Palo Alto Certified Network Security Engineer (PCNSE)
Hybrid Work Environment and Physical Demands
use hands to finger keys accurately when using calculator machines or computer keyboards; Must be able to travel independently to department and branch locations.
Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions.
Employees who work from home must have business operational internet to complete work tasks and communicate via video call or chat messaging systems in a dedicated workspace.