Senior Security Engineer-Architect​/Brooklyn, NY; Onsite

Senior Security Engineer/Architect

Onsite from day 1

Location:

Brooklyn, NY

The job opening is for an experienced, hands on senior security engineer/architect that will design, configure, implement and support security controls in a growing enterprise environment. The security engineer responsibilities will include leading security projects involving LAN, WAN, IoT, OT, Office 365, Datacenter, Wireless, Cloud, endpoints etc.

• Architect security controls.
• Assess Active Directory security roles and policies
• Configure IDS/IPS security policies
• Configure security policies in Office 365, Web Proxy, CASB
• Troubleshoot level 3 security related issues.
• Architect and configure cloud security controls
• Monitor SEIM, Armis and Secureworks
• Configure security policies in DNS and WAF
• Examine current firewall policies and ensure completeness and accuracy
• Respond to security incidents
• Analyze the network and implement solutions to increase uptime efficiency and security.
• Work with vendors to integrate security platforms into infrastructure

• Minimum of 6 years Security Engineering experience
• Strong Network Security experience
• Strong project management experience
• Must be able to lead projects
• Bachelor's degree in computer science, information technology or related field.
• Should be able to utilize security frameworks like NIST and MITRE.
• Strong knowledge of security management tools to facilitate troubleshooting, i.e. Wireshark, Netbrain, Extrahop, Netwitness etc.
• Strong understanding of cloud security
• Strong Identity and Access Management background
• Experience with configuring DNS. Familiarity with Infoblox to maintain public facing DNS services as well as IPAM
• Understanding of the various VPN technologies
• Knowledge of security of wireless environment including controllers and Client.
• Knowledge of resilient designs to ensure high availability
• Knowledge of IPS/IDS design as standalone hardware or as a feature within firewalls
• Understanding of IoT and OT security
• Ability to create reports using KRI and KPI
• Experience with Next Generation Firewalls including Cisco, Palo alto, Fortinet, Forcepoint, etc.
• Strong background in WAFs
• Work with vendors, carriers and other technical groups to implement new security controls and troubleshoot existing control