Information Security Engineer
Job Description
The Information Security Engineer will report directly to and support the Director, Cybersecurity
Operations & Engineering, to provide the highest quality information security services to our business
units and customers. The security engineer will be responsible for implementation and support of
information security toolsets, programs, and projects.
Responsibilities include but not limited to:
? Develop and publish Information Security procedures, standards and guidelines based on
knowledge of best practices and regulatory compliance
? Execute IT security standards and procedures
? Conduct security research in keeping abreast of latest security issues
? Role requires some advanced system administration experience
? Solid familiarity with application and network security
? Perform other essential duties as assigned
Desired Skills
• Detailed understanding of cybersecurity methodologies
• Excellent understanding of technologies such as firewalls, vpn, data loss prevention, antimalware, ids/ips, IAM, security audits, azure, aws, o365, scripting, terraform, hashicorp Vault
• Knowledge of security principles and best practices
• Knowledge of security frameworks and controls (e.g., NIST, CIS, PCI, GLBA, NYDFS)
• Attention to detail with problem-solving skills
• Understanding of project management methodology
• Ability to deliver under tight deadlines
Qualifications/Requirements
? Knowledge of current and emerging information security technologies and development
methodologies
? Solid communication, organization, and interpersonal skills
? Written communication skills, demonstrating the ability to document Information Security
procedures
? Strong knowledge with experience in Linux and Windows operating systems
? Working knowledge of security software and tools
? Strong work habits, exhibiting initiative, drive, and creativity
? Excellent teamwork skills
? 7 years experience in IT, with 5+ years in Information Security
? Must be authorized to work in the US, no sponsorship or C2C.
License / Certificate (any of the following a plus):
CISSP, Azure Security Engineer, AWS (Solutions Architect/Security), Palo Alto (PCSNA/PCSNE)
Ometria
Questrade Financial Group
Chainalysis Inc.
Nivoda
Kyndryl Japan