Systems Security Engineer II

WORK SHIFT

First Shift (United States of America)

The System Security Engineer Level II is required to be a highly skilled and hands‑on security engineer, and will be responsible for helping to maintain and expand the infrastructure of the entire Cambro network, ensuring that they are protected from cyber threats and attacks, ensuring compliance, and responding to incidents. In this role, the responsibility is to manage, monitor, and maintain our Network IT infrastructure from CVEs, cyber threats, manage and implement device firmware and software updates.

Also, the role is required to assist in projects and initiatives to support, upgrade, and maintain our technical environment to improve network security. The role requirement is to be proficient with cybersecurity frameworks including NIS, ISO
27001/27002, CIS, HIPAA, CCPA/CPRA and GDPR. The role requires to have a multi‑disciplined background including experience with Cybersecurity Operations, firewalls, IDS/IPS, switches, VLANs, routing protocols, IPsec, VPN tunnels, multi factor authentication and e‑mail security. In addition, they must have a solid understanding of virtualized servers, Windows workstations and services. This role is required to have the network monitoring skills and technologies for detecting unusual activity, investigate security breaches and lead incidence response.

• Monitor network traffic for anomalies, investigate alerts and respond to security incidents.
• Conduct regular vulnerability scans, risk assessments, patch management and mitigation across network devices.
• Ensure adherence to cybersecurity frameworks including NIS, ISO
  27001/27002, CIS, HIPAA, CCPA/CPRA and GDPR.
• Be proactive in scanning servers and network devices for vulnerable ports and protocols and rogue devices.
• Manage our firewall environment with the ability to create route policies and apply cybersecurity recommendations.
• Install and configure Network Equipment (Switches, Firewalls, and other networking hardware).
• Perform (Layer
  2) switch administration and configuration on Cisco/Ruckus switches, including configuring LAGs, interfaces, creating trunks, creating, and managing segmented VLANs.
• Possess a solid understanding of Windows Server services and roles, including installation and configuration.
• Create certificates for network devices and servers that have a web management capability.
• Have a strong understanding of Windows Active Directory and can design, implement, and configure and troubleshoot Active Directory issues.
• Create, manage and deploy Group Policy Objects (GPOs) to deploy applications and implement security including Windows firewalls.
• Use Power Shell to automate and standardize administrative tasks.
• Install a Linux VM and execute basic Linux commands and manage Linux appliances.
• Manage our virtualized server environment, managing, creating VMs and patching the VMware environment.
• Have a strong understanding of Virtual Switches, Port Groups (Distributed and Standard).
• Manage the Active Backup for Business on Synology and other advanced Synology administration features.
• Maintain and monitor Backup solutions.
• Manage our user's email accounts using the cloud service M365 from Microsoft.
• Responsible for creating and maintaining server and network documentation to include tasks and procedures.
• Proactively monitor our network using a variety of tools to help identify potential network and server issues.
• Assist in patching our entire infrastructure when needed using a variety of tools.
• Maintain strong technical abilities, knowledge of new and changing technologies.
• Prepare for emergencies by creating and/or updating action plans.
• Jump into time‑sensitive projects wherever needed.
• Show flexibility and a willingness to learn.
• Maintain healthy communication with IT Staff, IT Customers and Vendors.
• Actively participate in IT Infrastructure and Operations projects, managing, completing, communicating, and fully documenting assigned tasks and deliverables.
• Maintain reliable and consistent attendance, including being punctual, dependable, and flexible to potential schedule changes.
• Execute each essential duty satisfactorily to perform job…