Security Engineer

Direct End Client: Metropolitan Transportation Authority Job Title: Security Engineer Duration: 12 Months Start Date: ASAP Location: 2 Broadway , NY (Hybrid ) Position Type: Contract Interview Type: Telephonic/webcam/In-person Hours per week : 37.5 Hours Requirement ID: MTASECU434VV Position #: 3434-1 Description: Note : Please Note This Position Will Allow Consultant to Work on A Hybrid Remote Schedule (3 Days Onsite/ 2 Days Remote) Upon Start. Summary of the function/role:

• The IT Security Architect and Engineering candidate would be responsible for developing and implementing IT Security architecture and solutions using industry standard security frameworks and roadmaps for all MTA Agencies.
• It also includes securing enterprise information by determining security requirements, planning, implementing, and testing security systems with a team player environment.
• The candidate will have knowledge of and experience in developing and documenting security architecture and plans, including strategic, tactical and project plans. Knowledge of common information security management frameworks.
• Excellent technical knowledge of mainstream operating systems and a wide range of security technologies, such as network security appliances, identity and access management systems, anti-malware solutions, automated policy compliance tools and desktop security tools. Ability to develop, document and maintain security policies, processes, procedures, and standards.
• Knowledge of network infrastructure including routers, switches, firewalls and the associated network protocols and concepts.
• Strong analytical skills required to analyze security requirements and relate such requirements to the appropriate security controls.
• The ideal candidate will work with the business and technical teams to assess vulnerabilities and risks then design solutions to remediate their findings following MTA IT Security processes.

• To evaluate and develop requirements for local area networks, wide area networks, virtual private networks, routers, firewalls, and related security and network devices.
• Review and assess network traffic for vulnerabilities and/or gaps.
• Document existing security architecture of the application & infrastructure environment across the organization.
• To provide insight and function as a subject matter expert for systems hardening.
• Prepare system security reports by collecting, analyzing, and summarizing data and trends.
• Ability to prioritize projects and deliverables based on urgency, risk, and impact.
• Conduct design and engineering processes to ensure that security architecture solutions maintain the confidentiality, integrity, and availability of information assets.
• Participate in the risk assessments of new and existing technology solutions to identify opportunities for improvement, and engineering solutions to adequately mitigate associated risks.
• Define the appropriate architecture, technical requirements, and standards necessary to address information security needs for the organization.
• Diagram process flows and create initial security configurations based on real traffic and business efficiency needs balanced against security risk demands.
• Ensure security architecture reviews are conducted for new technology to ensure best practices, document security solutions, and enable common solutions across the enterprise
• Implement security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation.
• Maintain an awareness of existing and proposed security-standard-setting groups, state and federal legislation, and regulations pertaining to information security
• Work with IT leadership to develop strategies and plans to enforce security requirements and address identified risks.

• Bachelor's degree in Computer Science, Information Technology, or equivalent job-related experience
• Solid understanding of security protocols, cryptography, authentication, authorization, and security within IT and OT environments
• Knowledge of network infrastructure including routers, switches, firewalls and the associated network protocols and concepts
• Ability to interact with a broad cross-section of personnel to explain and enforce security measures
• 5 or more years hardening Windows OS, Network systems, and/or VMware Infrastructure
• 8 or more years of experience in the following areas:
• System and Network design and hardening
• Industry standard firewalls and switches
• Routing, network TAPs and switching including the ability to distinguish L2 vs L3.

• CISSP or other cybersecurity certification preferred
• Operational Technology experience preferred