Information Security Engineer

Position Overview: The Information Security Engineer will be a hands-on member of the Technology team who will provide technical and programmatic information security services to internal and external customers. We seek an experienced information security professional with a technical background to help implement security standard processes to protect MSE media and corporate resources. Working with peers, management, vendors, and project managers, this role will deliver solutions, maintain security services, and provide incident support. This role is responsible for proactively uncovering digital vulnerabilities within our environment and ensuring information assets and technologies are adequately protected.

Are you looking to be an integral team member on innovative next-generation security technologies? We'd love to hear from you!

Responsibilities:

• Plan, design, review, and implement security tools and processes to align with NIST CSF, HIPPA, PCI, and/or ISO27001.
• Develop and implement security requirements to protect MSE’s technology environment including but not limited to technologies that evaluate, identify, and track vulnerabilities, activities, and other potential threats.
• Plan/design/maintain endpoint deployments, configuration, and alerting.
• Develop security and contingency plans.
• Conduct needed technical security assessments, audits, penetration testing, and forensic IT functions of client/server systems (native and virtual), databases, networks, and vehicle/appliance technology systems.
• Define, review and implement information security policies, standards, and guidelines in compliance with federal and local laws including coordination with other parts of the organization.
• Understand and handle incident response lifecycle and procedures, including identification, containment, eradication, recovery, and lessons learned.
• Apply security knowledge of digital forensics techniques to investigate incidents and analyze evidence.
• Deploy, manage, and maintain SIEM tools to analyze and correlate security events across the enterprise.
• Analyze data collected by the event monitoring system(s), identifying results that decide immediate corrective action, trends that drive prompt action, and areas that require continued monitoring and/or further analysis.
• Maintain awareness of current security trends and threats, respond to reported incidents to conclusion, and provide awareness training to system users.
• Lead complex project work across multiple solutions, solution teams, or organizations.
• Configure IDS systems, analyze firewall traffic and SIEM.
• Maintain knowledge of Information Technology infrastructure library (ITIL) (certification preferred) with respect to security administration and information technology governance in a multi-platform environment.
• Power Shell scripting skills.
• Other duties as assigned.

Minimum Qualifications:

• 5+ years of work experience in the cyber security field, IT systems administrator, or other technical focused information security role.
• Hands-on experience with one or more security tools such as CrowdStrike, Rapid7, Tanium, NetScout, SPLUNK, Sentinel One, Zscaler and Palo Alto
• Knowledge of MS Windows and/or Linux operating systems.
• One or more relevant security certifications such as CISSP, OSCP, CASP+, GIAC or CEH.
• Experience with supporting collocated networks, Cloud Service Providers, AWS, Azure Google Cloud Platform, etc. is a plus.
• Experience with systems documentation and operational procedures.
• Experience working with multi-functional teams and partners.
• Ability to balance and prioritize tasks in a dynamic, fast-paced environment.
• Outstanding interpersonal skills, written and verbal communication skills, and creative writing ability; able to work effectively with staff at all levels.
• Strong organizational skills and attention to detail.
• Positive demeanor and good work ethic.
• Ability to work independently with minimal supervision and direction and in a team environment.
• Availability to travel for assignments.
• Good public speaking and presentation skills.
• Commitment to “internal clients” and customer service principles.
• Willingness to take the initiative and to follow through on projects.

Technical Skills:

• Experience with vulnerability management, penetration testing, NIST CSF frameworks, EDR solutions and BCP/DR.
• IDM and PAM technologies such as OKTA, Azure AD, CyberArk etc.
• Extensive knowledge and compliance experience of NIST framework.
• Experience documenting and maintaining BCP/DR Plans and Security Policies.
• Experience deploying and managing EDR solutions such as Sentinel One, Crowdstrike, MS Defender.
• SIEM experience such as SPLUNK, LogRythm etc.
• Remote access management experience including two factor authentication, Beyond Trust VPAM, Global Protect etc.
• Experience with Multicast networks and Palo Alto.
• Experienced knowledge of firewalls/ACL/encryption/VPN technology – Palo Alto, Cisco ASA/Firepower and associated protocols (IPSEC/GRE) and secure proxy functions.
• Understanding of cloud networking.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.