Information Security Engineer

Location: California
Information Security Engineer page is loaded## Information Security Engineer locations:
US CA Remote time type:
Full time posted on:
Posted 3 Days Agojob requisition :
JR101507

It's fun to work in a company where people truly BELIEVE in what they're doing!
* We're committed to bringing passion and customer focus to the business.
* The Information Security Engineer is responsible for contributing to the corporate Information Security program by assisting in the identification, recommendation and implementation of industry leading application security tools and techniques. The incumbent will also maintain and update application security processes and procedures and train team members on any relevant updates.
** Essential Functions
*** Assist with the development, implementation, and administration of information security policies, standards, and procedures, adhering to industry best practices
* Assist in integrating regulatory compliance requirements (e.g., PCI, GLBA) into the organizational security roadmap
* Assist in ensuring that the corporate IT environment is secure and complies with all external audit requirements and federal standards
* Coordinate with IT Operations to ensure endpoints and network devices conform to security standards, and that security devices and controls are working as designed
* Assist in the identification, evaluation and implementation of industry leading application security tools and techniques
* Plan, coordinate, and implement security measures to regulate access to computer data files and prevent unauthorized modification, destruction, or disclosure of information
* Perform risk assessments and execute system tests to ensure proper functioning of data processing activities and security measures
* Identify potential security risks, and define and document remediation options or mitigating controls
* Perform security incident investigations including: chain of custody, containment measures, root cause analysis, and identification of preventive measures
* Define and assist in the management of an Incident Response Team that addresses potential or in-progress security events, establishing and adhering to escalation procedures and response times
* Perform information systems evidence gathering, to support e-discovery requests and messaging searches
* Perform security reviews on requests for new commercial software or material configuration changes to existing software
* Perform periodic internal IT security audit functions on IT operational controls, to include system access controls, firewall rule reviews, etc.
* Participate in on-call rotation
* Perform related duties as requested
** Essential Knowledge, Skills, & Abilities
*** Excellent written and verbal communication skills required
* Solid presentation skills
* Significant knowledge of security-oriented regulatory requirements and compliance
* Excellent familiarity with IT security principles and practices including firewalling, hardening, data loss prevention, threat prevention, and identity management.
* Ability to provide technical guidance to less experienced team members
* Knowledge of the mortgage industry is helpful, but not required
* Commitment and ability to cultivate a diverse and inclusive work environment.
** Education
* ** Bachelor’s degree in computer science, Engineering, Information Systems Security or a related field is required.
* Security class certifications strongly preferred
* Azure certifications preferred
* CISSP license preferred
** Experience
* ** 5+ years of related IT experience required
* 2+ years in an Information Security engineering role
* 3+ years of experience in a regulated IT environment including some combination of SOX, HIPAA, GLBA, PCI preferred
** Compensation and Benefits
*** Covius offers an extensive benefits package for all employees, including medical, dental, vision and 401(k)!
* Compensation: $96,000 to $120,000 annually with a 10% AIP opportunity
** Application Guidelines:
** For best consideration, please submit your resume and application materials by DATE. Review of applications will begin immediately.
** Working Conditions
** Work is performed in a climate controlled indoor administrative office setting. The noise level in the work environment is usually quiet to moderate, depending upon the office or meeting location.
** Physical Demands and Activities
** While performing the duties of this job, the employee is frequently required to communicate. The employee frequently is required to remain stationary. The employee is frequently required to move about the office, operate a computer and other office machinery, such as calculator, copy machine, and computer printer; rarely position self to maintain files; rarely moves boxes weighing up to 10 lbs.

Close and distance observation required with the ability to observe objects at close range in presence of glare or bright lighting (e.g., computer screen). Must possess the ability to communicate information and ideas so others will understand and have the ability to interact…