Information Security Engineer

This position provides leadership and in-depth expertise in all security aspects surrounding the implementation and operation of Information Technology solutions to improve the ability of the organization to protect the confidentiality, availability, and integrity of its information assets. Primary responsibilities include: Provide technical engineering security expertise for company-wide projects, implementing security standards and baselines, and researching advancements in all security technologies that would benefit secure business growth. Lead vulnerability management program working closely with the patching team to limit the vulnerability attack surface. Be or become the lead SME for various security tools including CASB, the Vulnerability Scanning Suite, EPP, etc to maintain and improve the functionality of our security tools. Investigate, recommend, and assist with implementing security solutions that provide detection, prevention, containment, and deterrence mechanisms to protect and maintain the integrity of data and network resources. Define security product requirements, conduct research, evaluation, testing, configuration, and implementation, to include identify management, access control, and intrusion prevention solutions. Ensure guiding procedures for incident response are in place, effective and up to date, to include periodic computer incident response team (CIRT) activation to validate response procedures. Use process management tools to track information about security systems administration requests and security events. Track, generate and provide effective reporting for use by system administrators, business leadership and end-users; recommends and implements an effective event correlation solution that analyses the output from these and other security tools in a cost-effective manner. Author security system and application processes for both operation and management, including as-build service configuration documents.