Senior Systems Engineer - Cyber Security

Senior Systems Engineer – Cyber Security Summary Statement

You will be working with a team of experts to create solutions for all of Penske’s security needs.

As a Penske Senior Systems Engineer – Cyber Security you will define and promote security policies, and ensure associates follow these security standards through oversight of the set-up of a user’s security access, administer network security access and monitor the associate’s use of data systems to safeguard company information. You will be involved in recommending security products and analyzing their performance within a team of experts.

You will also manage the security projects and/or solution implementations to client group expectations.

• Define and promote security policies, and ensure associates follow these security standards through oversight of the set-up of a user’s security access, administer network security access and monitor the associate’s use of data systems to safeguard company information.
• Provide security reviews and define security models for new systems.
• Analyze and recommend security products based on their performance.
• Maintain network, server and workstation firewall protection and provide network and application scanning, security logging, and intrusion detection capabilities.
• Audit access to mission critical applications and to maintain compliance documentation for SOX and PCI. Analyze and review annual SOX and other compliance reports.
• Collaborate with different teams within the IT department to discuss, analyze, or resolve usability issues, and work on projects to update or create new security infrastructures.
• Work on 1-3 large-scale and cross-functional projects concurrently, assigned from department and group senior leadership.
• Mentor Security Engineers and Administrators and Offshore Contractors.
• Responsible to analyze and review annual SOX and other compliance reports.
• Analyze data to identify exceptions, last usage, and necessity of access for computer applications and systems.
• Modify computer security files to incorporate new software, correct errors, or change individual access status.
• Encrypt data transmissions and configure/maintain firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
• Involved in designing and maintaining intrusion detection processes and infrastructure.
• Testing and documentation of computer security and emergency measures policies, and procedures.

• Bachelor’s degree or equivalent experience required, advanced degrees or certifications preferred.
• 6+ years of experience in one or more of the following areas:
  • Cloud Access Security Broker (CASB)
  • Cloud Security
  • Centralized log collection and analysis (SIEM)
  • Data Loss Prevention (DLP)
  • Encryption technologies
  • Endpoint security platforms
  • Firewall platforms
  • Identity & Access management
  • IDS/IPS technologies
  • Incident Response
  • Policies, Standards, and Compliance
  • Security Architecture & Design
  • System hardening
  • TCP/IP and packet analysis
  • Vulnerability and Risk Management
  • Web proxy filtering
• Good documentation and presentation skills are also necessary for this position.
• Familiarity with disaster recovery planning and test execution.
• Cybersecurity certifications such as CISSP, CISM, or CCSP preferred.
• Regular, predictable, full attendance is an essential function of the job.
• Willingness to travel as necessary, work the required schedule, work at the specific location required, complete Penske employment application, submit to a background investigation (to include past employment, education, and criminal history) and drug screening are required.

• The physical demands described here are representative of those that must be met by…