Security Engineer

Description

EP Wealth Advisors (EPWA) is a wealth management advisory firm with over $24 billion in AUM as of May 31st, 2024, serving predominately high net worth individuals. EPWA fosters an inclusive environment that offers opportunities for our associates to learn, grow and enhance their skills to take on new challenges to progress in their professional careers.

Our office in Walnut Creek, CA is hiring for a skilled Security Engineer to safeguard our electronic information systems and minimize data risk exposure. Advocating for a best practice approach from a technical and security perspective is paramount. This role requires solid judgment, confidence, and the ability to make decisions on the fly using your experience and training. Our ideal candidate will have a demonstrated track record of delivering excellent client service, with exceptional organizational, communication and problem-solving skills. You will join a team of dynamic, collaborative, and client-focused professionals who are focused on delivering on our founding core values: Integrity, Entrepreneurial, Inclusion and Connection

Salary Range: $110,000 - $125,000 plus annual bonus

Duties and Responsibilities:

• Assist in managing endpoint and identity protection in a Windows environment running the Microsoft 365 suite of tools. Assist in the administration of Active Directory Single Sign On (SSO), MS Entra and MS Defender for security purposes
• Collaborate on the use of Managed Detection and Response (MDR) and Endpoint Protection Platform (EPP) for threat detection and Incident Response. This includes responding to tickets and interacting with EP Wealth Advisors employees who are impacted by these events, in coordination with IT Service Desk team
• Participate in the planning and design of an enterprise business continuity plan and disaster recovery plan, under the direction of the IT Security Manager where appropriate.
• Participate in the planning and design of enterprise security architecture, under the direction of the IT Security Manager where appropriate
• Oversee the installation, upgrading, and improvement of malware detection and prevention software.
• Coordinate with our MSSP to monitor systems for unusual activity and respond swiftly to security breaches.
• Ensure the security and stability of company and customer data.
• Analyze vulnerabilities and implement measures to mitigate risks.
• Develop official guidelines for information and communication security within the company.
• Research and train on existing information security tools and become a subject matter expert.
• Assist in managing all security tools (e.g. firewalls, data encryption, desktop security, anti-malware, ransomware, and DNS filtering)
• Collaborate with the System Administrator to monitor the organization’s network for security breaches and investigate violations when they occur.
• Maintain and adhere to EP Wealth’s cyber security plan, including supporting regular disaster recovery and penetration testing.
• Help to continuously improve security standards and best practices for the organization.
• Research the latest security trends and recommend enhancements to senior Security Engineers and IT Operations Management.
• Assist computer technicians and end users when they must learn about or install new security products and/or procedures.
• Conduct scheduled and ad-hoc IT security audits directed by the IT Operations Manager.
• Participate in security incident management. Create security incident communications on behalf of the IT Operations Manager for distribution to IT Management and external business customers.
• Prepare and document postmortem reviews of issues or incidents. Research and submit best practice recommendations for procedural resolutions.
• Lead/Supervisor experience is a plus
• Willing to travel as needed

Qualifications

• Minimum of 3-5 years of experience in cybersecurity, preferably in a security analyst role. 
• Strong understanding of information security principles, including malware prevention, firewalls, and intrusion detection systems.
• Familiarity with common Cybersecurity and Information Technology frameworks and standards, such as MITRE ATT&CK, COBIT and ITIL
• Ability to develop and implement comprehensive security policies and procedures.
• Proficiency in security software and tools, including malware detection and prevention systems.
• Ability to analyze and interpret security logs, alerts, and incident data to identify potential security incidents or breaches.
• Proficient in conducting vulnerability assessments and penetration testing to identify and mitigate security weaknesses.
• Excellent written and verbal communication skills to effectively communicate security risks and recommendations to technical and non-technical stakeholders.
• Ability to collaborate with cross-functional teams to implement security measures and respond to incidents.
• Understanding of regulatory requirements such as GDPR, HIPAA, PCI DSS, and ability to ensure organizational compliance with relevant standards. 
• Commitment to upholding ethical standards and maintaining the confidentiality, integrity, and availability of sensitive information.
• Knowledge of ISO27001/27002, PII, PHI, financial data regulations, data residency requirements, and international regulatory aspects pertaining to sensitive information is a plus 
• Certifications: Relevant certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CompTIA Security+ CCSP are highly desirable.
• Strong expertise in some or all of the following:
  • Microsoft Entra Admin Center
  • Microsoft Defender Security Center
  • SentinelOne
  • Zscaler
  • KnowBe4
• Ability to track your time in a ticketing system
• Participation in a 24x7 on-call rotation

What We Offer
We offer a highly competitive suite of holistic benefits designed to help our team members balance their personal and professional life commitments. These include options designed to encourage employee's health, happiness, and financial well-being.

• 11 Paid Holidays
• 3 Weeks (PTO)
• Paid Volunteer Time
• Flexible Work Schedule
• Highly subsidized Health, Dental, and Vision Plans
• 401k Retirement Account with company match contributions
• Free Mental Health services, Life Insurance, Long & Short-Term Disability Insurance
• Flexible Spending Accounts and Health Savings Accounts
• Employee Financial Education
• Employee Educational Expense Reimbursement
• Employee Charitable Donations
• Employee Referral Incentives
• Employee Team Building Activities
• Employee Assistance Program
• Complimentary Food and Snacks

#LI-Hybrid

EPWA is an equal opportunity employer. Prospective employees will receive consideration without discrimination because of race, creed, color, sex, gender, gender expression, gender identity, sexual orientation, age, religion, national origin, ancestry, mental disability, physical disability, medical condition, genetic information, marital status, military and veteran status, or any other basis protected by law.