Systems Security Engineer II or III

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Regular Full-Time Des Moines, IA, US

3 days ago Requisition

This position will be hired as either a Systems Security Engineer (SSE) II or III depending on experience.

The Systems Security Engineer II is responsible for working with cross-functional teams to ensure that controls are properly designed, implemented, configured, and performing as expected in support of the company’s security program and policies. This position is responsible for the design, implementation, configuration of Security tools and controls that enable the organization to detect and prevent computer and infrastructure security and cyber threats.

The Systems Security Engineer II will act as a subject matter expert (SME) on multiple security solutions, and will provide guidance to security team members, as well as other IT teams, on the proper adoption and support of Security tools and controls. This individual will identify, assess, prioritize, and remediate processes for cyber security risks and vulnerabilities. This individual is responsible to train peers and other team members on the newly deployed products and solutions, preparing SOP (Standard Operating Procedure) documents, troubleshooting documents as part of projects.

• Applies knowledge of controls, threats, vulnerabilities, risk, and technical systems to assist with future-state security planning and roadmaps to harden systems and close vulnerabilities. Researches and analyzes searches and analyze business trends and behavioral data to identify opportunities for improvements and new initiatives.
• Develops a deep understanding of the network and security infrastructure, systems, and tools to improve security strategies relative to the vision of the business while meeting compliance obligations by evaluating cyber security threats, risk, vulnerabilities, and processes to determine relative risk to the product, system, and organization.
• Implements security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation
• Investigates intrusion detections, malware, file propagation and any other form of malicious activity on the network
• Rolls out, maintains and improves strict security policies to reflect industry best practices and banking sector's compliance obligations
• Develops and maintains documentation critical to operating and executing the security program using tools such as Microsoft Visio and office
• Analyzes security incidents using research and forensic techniques
• Administers and monitors network security equipment and systems including but not limited to Data Loss Prevention (DLP), Security Incident and Event Monitoring (SIEM), anti-virus/anti-malware, application whitelisting, web and email security, Identity Access Management (IAM), Mobile Access Management, firewall, Intrusion Prevention Systems (IPS), Encryption, Virtual Private Networks (VPN), and other systems critical to the security of the corporate network
• Continually develops security skills and competencies. Helps transform control culture from current detective controls to preventative controls
• Prepares implementation, rollout and rollback plan for security tool introduction to the organization
• Adheres to existing disciplines in place for software/application change control processes in order to meet both regulatory and business requirements
• Provides superior customer service to all employees at multiple locations
• Meets with auditors and compliance officers as needed to represent security
• Collaborates with internal IT teams to coordinate projects and critical troubleshooting
• Works on multiple projects simultaneously and controls project deliverables and expectations. Troubleshoots documents preparation and train other team members as necessary
• Performs other duties as assigned

• Four-year degree in Computer Science or equivalent required, or a combination of education and experience
• At least six years of experience in network security and/or systems management with a focus on information security required
• Certification in the Technology Industry related to Cybersecurity, such as, but not limited to, Security+, CEH, GSEC, OSCP and CISSP, preferred

• Computer, peripherals, software, hardware including Windows, Linux/Unix
• SIEM, SCCM, DLP, AV/AS, IPS/IDS, Firewall, Application Whitelisting, Basic Penetration Testing, Web and Email Filter, Encryption, Password Management, Identity Access Management, Mobile Access Management

The Systems Security Engineer III is responsible for…