IT Security Engineer -III

Overview

The IT Security Engineer evaluates and oversees data security risks, develops security measures to safeguard information and data, and provides best practices and oversight for application security standards.

The engineer analyzes software designs and implementations from a security perspective, identifies and resolves security issues, and includes the appropriate security analysis, defenses and countermeasures at each phase of the software development lifecycle to produce robust and reliable software. The engineer also acts as a project lead and subject‑matter expert for IT Security tools and processes.

• Perform level 1 application security functions.
• Design, implement and manage security tools and systems (IDS, IPS, VPN, WAF, DLP, anti‑virus, anti‑malware, honeypots, SEIM, vulnerability scanners, web proxies, forensic toolkits, MFA, key management) in a heterogeneous computing environment spanning multiple physical and virtual data centers.
• Install, configure and maintain security controls such as intrusion detection systems, packet capture devices, data loss prevention tools, and other commercial off‑the‑shelf and open‑source security tools.
• Enhance the security posture of internal infrastructure and client‑facing systems.
• Perform risk assessments, vulnerability management, penetration testing and patch management for Unix/Linux, Mac, Windows systems and web applications.
• Understand attack vectors, exploits and hacking tools.
• Detect, investigate and recover from security incidents and assist with incident response plans.
• Raise company‑wide security awareness and monitor information‑security related websites and newsletters to stay current on attacks and trends.
• Assist the Security Engineering Team in evaluating new and emerging security tools and technologies.
• Maintain technical documentation.
• Consult team members on secure coding practices.
• Administer network and computing devices/systems that enforce security policies and audit controls in Windows and Unix‑based environments.
• Perform network traffic inspections, monitoring and log analysis.
• Recommend fixes, patches and recovery procedures in the event of a security incident.
• Recommend software tools and/or other solutions for technical challenges involving IT Security processes.

• Manage all technical security equipment, including IDS/IPS devices, data loss prevention equipment, web content filtering equipment and SEIM.
• Respond to alerts and investigate potential security incidents.
• Ensure daily compliance tasks are completed in a timely fashion and tracked in the appropriate ticketing system.
• Perform access certifications and other identity and access management related tasks.
• Work closely with development operations and software engineering to proactively identify and fix security flaws and vulnerabilities.
• Apply knowledge of compliance procedures and protocols for internal audit.
• Troubleshoot and repair issues with operating systems and security applications.
• Perform ongoing security testing and code review to improve software security.
• Provide engineering designs for new software solutions to help mitigate security vulnerabilities.
• Design, implement and maintain networking equipment including, but not limited to, routers, switches, firewalls and VPN concentrators.