Job Description:
The Security Engineer will participate in evaluating, developing, and implementing security tools, standards, procedures, and guidelines. This role will collaborate with both technical and non-technical business partners and stakeholders.
• Ensures security infrastructure processes, concepts, and maintenance are incorporated into systems, software, and hardware platforms in accordance with approved internal standards
• Provides technical input to projects along with implementation support to network services and infrastructure design teams
• Performs maintenance of security infrastructure to include updates and patching of software and hardware
• Maintains a comprehensive and in depth, component level understanding of all IT systems, data flows, applications, technologies, security controls, threats, weaknesses and countermeasures
• Supports information security governance, risk management and compliance programs which include security assessments and on-site reviews, security gap remediation, security incident support, audit support functions, business process and project consultancy and security education and awareness
• Designs and develops secure IT solutions and control frameworks using network segmentation, gateway security, specialist security tools (e.g., ACL, Tokenization)
Skillset Required:
• Experience with cloud technologies: AWS, Azure, GCP
• Experience with securing and hardening Windows, Linux
• Experience with networking protocols and technologies: TCP/IP, routers, firewalls, VPN, load balancers
• Experience with on premise and cloud-based security technologies: end point protection, hardware security modules, sandboxes, SIEM, web application firewall, intrusion detection systems, intrusion prevention systems, web proxies, wireless intrusion prevention systems, and file integrity monitoring