Security Engineer

Qualifications:

• Bachelor's degree in computer science or related field OR equivalent combination of education, training, and experience CCNA, CCNA Security, CompTIA Network +/Security +/Advanced Security Practitioner certifications desired
• 5 years of experience in hands-on information security administration, preferably in a financial institution

• Ensures that information security functions are completed in accordance with established policies/procedures/standards, government regulations, and emerging security alerts
• Integrates changes into current practices
• Provides advanced operations and engineering support for critical security systems and services, including firewall, IPS/IDS, endpoint security, computer forensics, vulnerability/penetration assessment/mitigation, and security event management (SIEM)
• Designs, deploys, validates, and supports effective security solutions that provide complete coverage and protection
• Recommends, schedules, and performs maintenance/upgrades on security systems to minimize impact to members and employees
• Assists the IT security manager in evaluating and selecting new information security software and hardware
• Responds to requests, provides assistance/technical support, and troubleshoots/resolves problems in a timely manner
• Maintains open communication with users regarding questions, problems, project status, and deadlines
• Reviews security logs daily
• Analyzes, responds to, and remediates security incidents or suspicious activity
• Performs routine active directory, database, and end-user security audits
• Develops/maintains/updates information security policies, procedures, processes, and diagrams
• Designs and conducts training program for annual corporate-wide security awareness training
• Conducts periodic reviews of existing security policies and procedures to ensure maximum efficiency and service delivery and makes recommendations for modifications as needed
• Seeks better methods to accomplish department goals
• Provides assistance with complex information security activities and problem resolution