Remote Senior Security Engineer

Description:

• The Senior Security Engineer will install, document, troubleshoot, and maintain network security infrastructure and software.
• This role involves configuring security tools and applications to enhance detection and response capabilities, track performance of controls, streamline internal processes, and improve defensive controls.
• Daily responsibilities include collaborative issue remediation on various IT-related issues such as cybersecurity risks, regulatory compliance, data protection, and user access.
• The engineer will configure network security controls including firewalls, IDS/IPS, email gateways, WLAN, vulnerability scanners, and endpoint controls like EDR and DLP.
• Responding to security events, validating findings, and remediating gaps identified by vulnerability scanning and penetration testing is essential.
• The position requires planning, designing, implementing, and supporting security tools for preventative controls, event detection, and incident response efforts.
• The engineer will create and maintain system documentation, security infrastructure topology, data flow diagrams, an internal knowledge base, and incident runbooks.
• Proactive management of updates and patching of security applications and device software/firmware and hardware is required.
• Participation in project planning and execution as an information security subject matter expert (SME) is expected, ensuring adherence to internal policy and security best practices.
• The engineer will also participate in blue/purple team exercises, design and execute disaster recovery/business continuity/incident response tabletop exercises, and update processes and documentation based on lessons learned.

Requirements:

• A computer science-related baccalaureate degree from an accredited college or equivalent experience is required.
• Candidates must have a minimum of 5 to 8 years of experience in security within an enterprise environment.
• Experience with vulnerability scanning applications, log management and alerting platforms, and packet analyzers is necessary.
• Knowledge of network segmentation and/or security zones for data protection according to data classification is required.
• The candidate should be a team player willing to establish strong positive working relationships across the business.
• A willingness to share knowledge with co-workers and assist them in understanding technical and business topics is essential.
• The candidate must be open to learning new tools and technologies as needed.
• A working knowledge of information systems security standards and practices is required, including access control, system hardening, system auditing, log file monitoring, security policies, and incident handling.
• Experience with detection and response tools such as Network Behavior Anomaly Detection, Data Loss Prevention, Email Gateway services, Sandboxing, DDoS Mitigation, WAF, Forward/Reverse Proxies, and DNS Security is necessary.
• Demonstrated hands-on security knowledge of platforms such as Windows, Apple IOS, and Linux is required.
• A working knowledge of networking protocols, web technologies, and cloud computing is essential.
• The ability to interpret information security data and processes to identify potential Indicators of Compromise (IoC) is necessary.
• Candidates must be able to quickly understand complicated data flows to identify and validate security requirements.
• The ability to work effectively, independently, and without supervision is required.
• Clear communication of Information Security matters to executives, auditors, end-users, and engineers using appropriate language, examples, and tone is essential.
• One or more advanced professional security certifications such as CISSP, CRISC, or CISM (or requisite experience to attain within 12 months) is required.
• Palo Alto certifications are considered a plus.

Benefits:

• The position offers a competitive benefits package for full-time employees, including medical, dental, and vision insurance.
• Flexible spending account options are available.
• Employees receive non-accrued paid time off (PTO) and company-paid holidays.
• A 401k Retirement Plan is provided.
• Short- and long-term disability benefits are included.
• Individual compensation will be commensurate with the candidate's experience, and the position is eligible for an annual bonus.
• The salary range for this position is $110,000 to $130,000 USD.