Senior Security Engineer

GENERAL DESCRIPTION OF WORK:

Under the direction of the Information Security Manager, the Senior Security Engineer serves as a senior technical contributor supporting VIA's information security architecture, operations, and risk management program. This role partners closely with IT and business teams to design, implement, and maintain security controls while ensuring systems and processes are documented, sustainable, and transferable within a small team environment. The Senior Security Engineer plays a key role in strengthening VIA's security posture through technical leadership, collaboration, and disciplined documentation, rather than reliance on individual or informal knowledge.

ESSENTIAL FUNCTIONS:

Designs, implements, and maintains security controls and technical solutions in partnership with the Information Security Manager.

Supports the development and maintenance of VIA's information security architecture, including Zero Trust, identity security, endpoint protection, network security, and monitoring solutions.

Develops and maintains security architecture diagrams, system documentation, runbooks, and standard operating procedures to ensure continuity of knowledge in a small team environment.

Partners with Technology Operations and other IT teams to coordinate vulnerability identification, remediation activities, and control implementation.

Supports the development, testing, and refinement of incident response procedures and participates in coordinated response activities following documented processes.

Assists with the configuration and ongoing improvement of security monitoring and alerting capabilities, including managed detection and response (SOCaaS/MDR) services.

Supports the review, implementation, and maintenance of security policies, standards, and technical controls aligned with industry best practices.

Provides technical guidance and security recommendations for IT projects, cloud services, and system changes.

Participates in security risk assessments, control reviews, and compliance-related activities as required.

Contributes to security awareness and training initiatives by providing technical input and supporting program refinement.

This job description excludes marginal functions that are incidental to performing the job. Other duties may exist.

REQUIRED

EDUCATION AND EXPERIENCE:



Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field and five (5) years of progressively responsible experience in information security, systems security, or network security. Experience may be substituted in lieu of education on a year-for-year basis up to four years.

PREFERRED QUALIFICATIONS:

Experience working in an enterprise IT environment with responsibility for security controls, monitoring, and response.

Experience supporting or implementing cloud-based and Zero Trust security architectures preferred.

Preferred certifications:

• CISSP, CISM, or equivalent

• GIAC security certifications

• Security+, CCSP, or similar

ADDITIONAL REQUIREMENTS:

Strong knowledge of information security principles, risk management practices, and control frameworks.

Experience with network security, firewalls, intrusion detection/prevention, endpoint protection, and security monitoring tools.

Familiarity with cloud security architectures, Zero Trust concepts, identity and access management, and modern endpoint security platforms.

Ability to document technical systems and processes clearly for use by other technical staff.

Ability to work independently while coordinating closely with a small team and cross-functional partners.

Ability to analyze security risks and recommend practical mitigation strategies.

Strong written and verbal communication skills.

Ability to manage multiple priorities in a small-team environment.

Ability to exercise sound judgment in security-related decision-making.

Able to work in a team-oriented, collaborative environment.

Must be able to maintain good work attendance.

Safety Accountability Statement:

- Employees must consider safety in all tasks performed, as well as demonstrate safe judgment and decisions that not only maintain their own safety; but that of fellow employees…