Security Engineer III​/DLP

Security Engineer III/DLP

Primary

Purpose:

The security engineer is responsible for implementing, maintaining, monitoring and managing secure solutions. The engineer delivers these solutions in accordance with the organization’s architectural designs, best practices, and regulatory or compliance requirements. As risks change, the security engineer recommends modifications and enhancements to ensure the organization evolves with the threat landscape.

• Handles daily implementation, monitoring and operational support of hardware, software, customer applications, managed solutions and service provider relationships.
• Engages in information security projects that evaluate existing security infrastructure and propose changes as defined by security leadership and architects. Also delivers projects on time, within budget and in accordance with service level agreements (SLAs).
• Assists with incident response and system stability issues as they occur. This may include involvement outside of regular work hours, and responsiveness is expected.
• Works in tandem with architects, the security operations center (SOC), incident responders (in cases of anomalous activity and host compromise), and technology infrastructure and development team members.
• Manages service and escalation tickets within SLA expectations.
• Develops security test plans from architectural design. Identifies deficiencies and makes enhancements to ensure production is not impacted.
• Participates regularly in change project and change management meetings.
• Researches, validates and deploys solutions meeting security and business needs.
• Follows security engineering fundamentals and processes as outlined in NIST 800-160.
• Influences the planning and execution of incident response and postmortem exercises, with a focus on creating measurable benchmarks to show progress or deficiencies requiring additional attention.
• Focuses on driving security efficiencies, enabling security team members to work on more advanced tasks.
• Conducts performance testing to stress the limitations of security solutions while ensuring business innovation and day-to-day processes are not negatively impacted.
• Develops technical solutions and new security tools to mitigate vulnerabilities and automate repeatable tasks.
• Leads IT groups and business units as necessary to troubleshoot compatibility issues between security tools and productivity programs.
• Analyzes client and customer needs and provides clear and concise reports to leadership.
• Works closely with management on assigned projects from inception through implementation, ensuring adequate internal communication and user involvement.
• Provides feedback and suggestions to management to improve IT Security processes and procedures.
• Works closely with project managers to meet and complete project milestones accurately and on time.

• Performs other duties as assigned.
• Travel as required.

Education & Licensing:
Bachelor's degree in management information systems or a related field, and be pursuing a master’s degree in business administration or an IT related field. Licenses as needed.

Experience:

Three (3) years of experience in cybersecurity, with a system or network security engineering background. Preferably at least 3+ years in cybersecurity, with a system or network security engineering background and additional 2+ years of IT experience.

Technical and analytical expertise, with a proven deep background in technology design, implementation and delivery. Extensive knowledge of traditional security controls and technologies, including SIEM, IDS/IPS, PKI, IDAM, antivirus and firewalls, and newer offerings such as EDR, threat intelligence platforms, security automation and orchestration, deception technologies and application controls.

Experience managing SIEM systems, threat intelligence platforms, security automation and orchestration solutions, IDS/IPS, file integrity monitoring (FIM), data loss prevention (DLP) and other network and system monitoring tools.

• Experience with Application Control Listing Software
• Experience with SIEM…