Govt. IT - Security Engineer

Job Description POSITION SUMMARY

The Security Engineer, under the direction of the Director of IT Security, is primarily responsible for implementation, monitoring and supporting the Sault Tribe’s cyber security infrastructure, including hardware, software, and processes.

• Configure, monitor and maintain firewalls, intrusion detection/prevention systems, and other security tools.

• In collaboration with the Director of IT Security, update, implement and test incident response plans to address security breaches and incidents promptly.
• Work with all other IT Security staff to investigate security incidents, analyze root causes, and recommend corrective actions.

• Conduct regular vulnerability assessments and penetration testing.
• Identify and mitigate security vulnerabilities to improve the organization’s overall security posture.

• Ensure compliance with industry regulations and standards.

• Provide security awareness training to employees and stakeholders.
• Foster a culture of security awareness throughout the organization.

• Work with IT Security team to perform regular security audits to assess compliance with internal and external security requirements.
• Work with audit teams to address findings and implement necessary improvements.

• All other job-related duties as assigned.

Immediate peers, peers in other departments, immediate supervisor/manager, managers in other departments, executives, Board of Directors, customers and outside vendor/service providers.

Position medium with lifting of 50 pounds maximum. Physical factors include constant use of near vision and typing; frequent walking, sitting, kneeling, use of midrange/color vision; and occasional standing carrying, lifting, pushing/pulling, climbing, stooping, crawling, reaching, manual handling, use of hearing, smell and far vision, depth perception and field of vision, typing and bending. Working conditions include occasional exposure to extreme cold and noise.

Potential hazards include frequent computer and equipment use and occasional exposure to moving mechanical parts, electric shock, client contact, and medical equipment.

Bachelor’s degree in Computer Science, Computer Information Systems, or a related field required or five years of experience in an IT/technical field required.

Three years’ experience in IT systems support with an emphasis on cybersecurity practices required in addition to above educational requirements.

Must undergo a Criminal Background Investigation done under the rules of the National Indian Gaming Commission. Must have a valid driver’s license and be insurable by the Sault Tribe Insurance Department. Must comply with annual driver’s license review and insurability standards with the Sault Tribe Insurance Department. Must comply with the Sault Tribe’s Drug-Free Workplace Policy which may include random drug tests.

Strong technical and system analysis skills required. Knowledge of Microsoft Active Directory, Microsoft Windows, Exchange, Office
365, SQL, and Microsoft Server preferred. Knowledge of IP-based network hardware and communication is preferred. Knowledge of Data storage, data backup and archiving. Knowledge of Business Continuity concepts and Data System Security is required. Knowledge of IBM I-Series systems and operations is preferred. Knowledge of PERL, Java, HTML, MySQL, Python, Web Application Programming, and Linux preferred. Understanding fundamental concepts in information security, confidentiality, integrity, and availability (CIA triad), risk assessment methodologies, threat modeling, and defense-in-depth strategies.

Knowledge of current and emerging cyber threats, attack vectors, and malware trends. Understanding of threat actors, their motivations, and tactics, techniques, and procedures (TTPs).…