Cybersecurity​/Info Security Engineer; Remote

Title: “Cybersecurity/Information Security Engineer”

Location: Remote

GENERAL

SUMMARY:

The Information Security Engineer is a key member of the technology team that evaluates the firm’s technology and information systems to develop security strategies and solutions to protect the Firm from internal and external threats.

This position supports the firm’s overall information security program by evaluating, testing, documenting, and implementing products and solutions, continuous management and monitoring of software, analyzing and remediation of security incidents and alerts. The Information Security Engineer is accountable for planning and executing security projects to improve the Firm’s overall security posture; for creating and maintaining of security-related documentation and for other various security-related tasks.

Information Security Engineers are responsible for the protection of all Information Assets, including physical and digital data, technology infrastructure, cloud and on-premise applications, user endpoints, identities and other Technology Resources.

Information Security Engineers must continually adapt to understand and stay a step ahead of the latest cyber threats. The ideal candidate is passionate about security, is intellectually curious, and thrives on learning, teaching and mentoring alike. The firm’s security team values and is committed to fostering a cooperative leadership and learning environment from every chair, regardless of title.

ESSENTIAL JOB FUNCTIONS :

• Build and administer core network and systems security controls, including: firewalls, intrusion detection and prevention, anti-malware, application whitelisting, host intrusion prevention, endpoint detection and response (EDR), privileged access management (PAM), privilege elevation, vulnerability scanners, content monitoring / filtering, security monitoring (SIEM), enterprise authentication and authorization.
• Plan and execute Information Security projects. Represent the security team on projects owned by other IT teams.
• Perform security and privacy reviews of IT services and changes (e.g., new technologies being added to the environment or that are undergoing significant changes). Monitor change management database activity to stay abreast of developments in the IT environment.
• Help define and document the firm’s Information Security Architecture and Roadmap.
• Based on the Firm’s IT Risk Assessment, plan for the lifecycle, implementation and integration of future security technologies with other security and non-security technologies. Recommend and drive technology and process improvements for Information Security Programs.
• Collaborate actively with senior technologists on other IT teams to design solutions that satisfy the priorities of each individual IT team involved, while also providing the best possible user experience and appropriate security assurance.
• Interface and cooperate with internal and external audit and exam teams as required.
• Establish architectures and baseline configurations for various security technologies, including: anti-malware, endpoint detection and response (EDR), security monitoring, systems security, network security, identity and access management, public-key infrastructure (PKI), deception technologies, DLP and web/e-mail content filtering.
• Design and maintain strategies for Information Security documentation, including runbooks, procedures, processes and hardware and software inventory detail.
• Implement and operate technical security solutions across a wide range of technologies, and serve as a third-tier support resource and SME for these technologies as required.
• Participate in technical and non-technical projects requiring information security oversight to ensure policies, procedures and standards are met.
• Serve as a member of the Computer Security Incident Response Team (CSIRT), assisting with incident response (IR) with the IR and security operations center (SOC) efforts.
• Recommend new security solutions as well as effective improvements to existing security controls that do not negatively impact business innovation.
• Assist with threat and…