Job Alert: IT Security Engineer

IT Security Engineer

Stone Arch Services has a client in need of a full‑time IT Security Engineer for a nonprofit company that sponsors programs to help students and families plan and pay for college. The company works with schools and loan servicers to lower student loan default rates, promote financial literacy and provide resources to support student loan borrowers to successfully repay their loans.

For postsecondary institutions, this company offers a suite of services that includes financial literacy, student loan repayment counseling and default prevention. This line of business is a natural adjacency to their role as a guaranty agency as it expands the reach to help student loan borrowers successfully meet their student loan obligations.

This is a really great company with a great mission. The benefits are also very strong. The corporate office is currently in Oakdale, but will be moving to Washington Ave in Minneapolis in September 2016.

Ensures the secure operation of the in‑house computer systems, servers, and network connections. This includes occasional analysis of server and firewall logs, network traffic, establishes and updates virus scans, and troubleshooting. Analyzes and resolves security breaches and vulnerability issues in a timely and accurate fashion. Conducts user activity audits to regulate access to computer data files and prevent unauthorized modification, destruction, or disclosure of information.

• Participates in the planning and design of enterprise security architecture
• Participates in the creation of enterprise security documents (policies, standards, baselines, guidelines and procedures)
• Provides Information Security subject matter expertise regarding the planning and design of an enterprise Business Continuity Plan and Disaster Recovery Plan
• Maintains up‑to‑date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors
• Evaluates and recommends additional security solutions or enhancements to existing security tools to improve overall enterprise security
• Participates in the planning, deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions
• Maintains up‑to‑date baselines for the secure configuration and operations of all in‑place devices (i.e., security tools, workstations, servers, network devices, etc.) through anti‑virus, spam, and malware administration and management, including security applications and hardware
• Participates in the design and execution of vulnerability assessments, penetration tests and security audits
• Reviews security alerts and vulnerabilities, and communicates accordingly with appropriate department leaders and data owner and managers; reviews agency information systems and provides written reports of potential security risks and recommended solutions
• Oversees management reporting regarding the IT departments overall network security program
• Participates in the incident reporting and incident response processes and procedures to address security incidents and breaches, and reports of violation of policy; serves as a point of contact for information security inquiries and audits
• Collaborates with the Network Engineering team regarding network security, including firewall administration, web proxy administration, and intrusion detection/prevention systems
• Creates and maintains documentation of network security configurations and processes
• Participates as a senior member of the Security Operations Center (SOC) in the effective detection, analysis, containment, and eradication of attacks
• Works with internal and external project managers to complete projects on time, and leads or participates in IT projects to provide information security expertise, guidance, or training
• Provides mentoring to junior members of the team as needed
• Complies with all company Group Policies
• Performs other duties as assigned

• High School Diploma or GED
• 5+ years of IT…