Sr. Security Engineer

Description

Seeking a Sr. Security Engineer Consultant. Our client is on a journey to becoming the best IT organization in the airline industry, a journey of transformation. They are changing the way we do business from top to bottom as we strive to create meaningful and innovative solutions and are looking for team members to help us realize our vision.

• Responsible for the design, testing, evaluation, implementation, support, management, and deployment of security systems/devices used to safeguard the organization's information assets
• Responsible for analyzing the information security environment and assisting with the development of security measures to safeguard information against accidental or unauthorized modification, destruction, or disclosure
• Work with the technical team to recover data after a security breach
• Configure and install firewalls and intrusion detection systems
• Develop automation scripts to handle and track incidents
• Investigate intrusion incidents, conduct forensic investigations and mount incident responses
• Deliver technical reports and formal papers on test findings
• Install firewalls, data encryption, and other security measures
• Maintain access by providing information, resources, and technical support
• Ensure authorized access by investigating improper access; revoking access; reporting violations; monitoring information requests by new programming; recommending improvements
• Update job knowledge by participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations
• Accomplish information systems and organization mission by completing related results as needed
• Build, deploy, and track security measurements for computer systems and networks
• Mitigate security vulnerabilities by implementing applicable solutions and tools
• Perform vulnerability testing, risk analyses, and security assessments
• Collaborate with colleagues on authentication, authorization, and encryption solutions
• Test security solutions using industry standard analysis criteria
• Respond to information security issues during each stage of a project's lifecycle
• Perform risk assessments and testing of data processing systems
• Establish system controls by developing framework for controls and levels of access; recommending improvements
• Establish computer and terminal physical security by developing standards, policies, and procedures; coordinate with facilities security; recommend improvements
• Safeguard computer files by performing regular backups; developing procedures for source code management and disaster preparedness; recommends improvements
• Determine the sensitivity of the data in order to recommend the appropriate security needs
• Develop proposals for, and consider cost effective equipment options to satisfy security needs
• Communicate with the technical team, management team and users company wide if data security is breached
• Design infrastructure to alert the technical team of detected vulnerabilities
• Evaluate new technologies and processes that enhance security capabilities
• Supervise changes in software, hardware, facilities, telecommunications and user needs
• Define, implement, and maintain corporate security policies
• Analyze and advise on new security technologies and program conformance
• Create, test, and implement network disaster recovery plans
• Recommend security enhancements and purchases
• Train staff on network and information security procedures
• Develop security awareness by providing orientation, educational programs, and on‑going communication
• Recommend modifications in legal, technical and regulatory areas that affect IT security
• Collaborate with multiple teams to support data protection
• Implement solutions to help safeguard the client's most sensitive data
• Responsible for architecting, implementing, documenting, and maintaining Data Protection technologies such as Bit Locker endpoint encryption
• Lead the implementation and migration to Microsoft Intune at an enterprise scale
• Design and implement security policies and configurations for device management with Microsoft Intune
• Recommend best practices and test new features of the product
• Provide training and support to partner teams and end users on new security features
• Collaborate with business partners who could benefit from the new tools, assisting with implementing new use cases
• Continuously monitor and optimize the performance and security of the solution
• Administer data protection tools including patching, upgrading, troubleshooting, testing and report generation
• Develop new policies using regex, machine learning, fingerprinting, and/or dictionaries to monitor unique data types
• Review existing deployment architecture, engineering, and policies and assess overall deployment against best practices
• Evaluate and build new data protection solutions in alignment with cloud requirements
• Operationalize these solutions to deliver value to the business
• Implement protective controls in the cloud to ensure the…