IT Security Engineer

Job Description

Title : IT Security Engineer

Location:
Chattanooga TN (Onsite)

Role responsibilities

Must have Palo Alto firewall experience.

The Information Security Specialist will perform any of the following activities depending on business needs:

Coordinate and perform ISO 27000 process management functions and control testing reporting and activities in accordance with regulatory and departmental policy and procedures.

Update and maintain control matrices and spreadsheets, and providing recommendations for Information Security Management System.

Assist in operational and security-related control and risk assessments to ensure compliance to regulatory and statutory requirements, as well as industry specific guidelines, such as PCI DSS, ISO 27000, COBIT and ITIL

Auditing deployed solutions, providing recommendations, and ensuring security policies and regulations are followed and adhered to for all implemented systems.

Plan, deploy, harden, maintain, troubleshoot, operate and manage network security solutions such as:
Palo Alto, or similar capability, next-generation firewalls (NGFW), Intrusion Detection and Prevention Systems (IDS/IPS), Cloud based security web gateways, Firewall management tools (e.g. Fire Mon, Algo Sec, Tufin), data loss prevention tools, ics and ot system security requirements, honeypots and network sensors.

Documentation of logical and physical architecture.

Follow all the ITIL processes (incident, problem, change) for all items impacting plant operations.

Create Application and Hardware (System) Lifecycle Plans.

Work with the ITP management to ensure that a multiyear lifecycle plan is created to support from 1st to 3rd level support including milestones for all known firmware/software versions or functional upgrades and sunset and successor systems.

Work with the ITP department to determine, the current level of performance expected and risk with current process and systems. Create with the business area requirements plans for continuous improvement of the process and systems throughout the plant.

Required Desired:

• Experience in Information Security Management
• Frameworks such as ISO 27000, PCI DSS, HIPA
• NERC CIP etc.
• CISSP, CRISC, CISN, CISA, and/or GIAC; or comparable certification
• Network Intrusion Prevention
• Advanced Understanding of IP networks
• Firewall Design/Implementation/Maintenance
• Network Architecture and Design
• Configuration management
• System Hardening (Windows, SQL, UNIX, LINUX, NETWORK)
• Work flexibility (travel requirements, work schedule, etc.)
• Work Hour flexibility required based on Production Schedule
• Day to Day working relationship with the IT and Production community.