Information Security Engineer

Join to apply for the Information Security Engineer I role at Simmons Bank

The Security Engineering Team is responsible for the design, implementation, and maintenance of security solutions to include, but not limited to:
Identity & Access Protection, Email Security, Network Security, Endpoint Protection, Data Protection and Vulnerability Management.

You will join a team of Associates dedicated to ensuring the security of the corporate network and be responsible for the day-to-day operation of the Information Security Program.

Level I Security Engineers are primarily responsible for the implementation and maintenance of security systems and supporting end-users’ use of the Company’s security services.

• Contributes to the design and implementation of security systems, as needed
• Identifies and documents system security requirements to assist with solution selection
• Assists with the evaluation of new technologies or process improvements that enhance security capabilities

• Configure, maintain, and monitor the Company’s security systems, including but not limited to: secure email gateway, firewall, VPN, network access control, secure web gateway, security information and event management platform, endpoint protection, data loss prevention and vulnerability scanning tools
• Handles service request and incident tickets pertaining to security systems
• Reviews system alerts and responds in accordance with established procedures (e.g. triage, mitigate, and escalate)
• Researches, tests and presents proposed security system changes to IT and Business leadership
• Conducts security system changes in accordance with the change management process
• Collaborates with external parties (e.g. vendor support, professional services and others) to maintain security technologies
• Monitors cases, tickets, and incidents opened with vendor support to ensure timely response and remediation
• Applies upgrades, patches, and other configurations in support of the patch management and vulnerability management processes
• Assists in maintaining the team’s written documentation (e.g. diagrams, procedures, and other system information) for the Company’s security systems

• Participates in rotating on-call schedule representing the Security Engineering team
• Communicates security concerns to management in a timely manner
• Completes training related to this position, as assigned, in a timely manner
• Pursues IT and/or Security certifications relevant to this position
• Takes initiative and responsibility for achieving desired results
• Performs other duties as assigned

• Minimum of four (4) years of experience in information technology, network engineering, or security engineering (required)
• Bachelor’s degree in a related field (preferred)
• Direct experience administering security systems such as: endpoint protection, network access control, web content filtering, data loss prevention, vulnerability scanners, and firewalls (preferred)
• Experience in operational roles supporting of IT systems, networks, or applications and direct experience conducting basic troubleshooting steps, documenting tickets, and communicating with end-users (required)

• Comp Tia A+, Security+, Network+, or other baseline security related certifications (required)

• Must be willing to periodically work non-standard hours and be on call
• Baseline understanding of common enterprise operating systems, database systems and networks
• Ability to read and interpret documents and follow written or verbal instructions
• Ability to conduct oral and written communication and present, in a professional manner, to internal and external parties
• Ability to prioritize assignments while working on multiple projects
• Ability to manage their own time with awareness to escalate issues promptly and with focused on meeting SLA targets
• Ability to work independently with limited supervision
• Possesses service-oriented mindset and strong customer service skills

Equal Employment Opportunity Information:
Simmons First National Corporation and its subsidiaries are committed to a policy of equal employment with respect to a person's race, color, religion, sex, ancestry, sexual orientation, gender identity, national origin, covered veterans, military status, physical or mental disability or any other legally protected classifications.