Information Security Engineer

Jobtailor; Deutschland; Vor Ort; EUR 55.000 - 75.000; Vollzeit

Zusammenfassung

White Cap is seeking an IT Security professional to support daily security and audit compliance operations for the IT Security Services group. The role focuses on technology issues and involves working on CSIRT activities, log reviews, patches, and governance.

You will participate in incident response drills, update documentation, deploy security products, and help maintain compliance with Sarbanes-Oxley and PCI requirements. A mix of hands-on and analytical tasks awaits in a dynamic environment.

Qualifikationen

• BS/BA in a related discipline; typically 2–5 years of experience.
• MS/MA in a related field with 2–4 years of experience; certifications may be required in some areas.

Aufgaben

• Serves on CSIRT to plan and participate in regular incident response drills.
• Initiates security response procedures when a problem is detected and resolves tickets.
• Updates CSIRT documentation and procedures; deploys security products and reviews logs.
• Reviews user access to production systems; applies patches and addresses vulnerabilities.
• Maintains security servers and manages SSL, keys, passwords, and anti-virus solutions.
• Ensures compliance with Sarbanes-Oxley, PCI regulations, and other authorities.

Kenntnisse

Data analysis

Incident response

Vulnerability management

Security governance

Collaboration

Ausbildung

BS/BA in related discipline

MS/MA in related field

Certification may be required in some areas

Tools

Patch management tools

Identity management tooling

Jobbeschreibung

A position at White Cap isn’t your ordinary job. You’ll work in an exciting and diverse environment, meet interesting people, and have a variety of career opportunities.

The White Cap family is committed to Building Trust on Every Job. We do this by being deeply knowledgeable, fully capable, and always dependable, and our associates are the driving force behind this commitment.

Job Summary

Provide assistance in day-to-day security and audit compliance operations for IT Security Services group, primarily focusing on technology issues.

Major Tasks, Responsibilities, and Key Accountabilities

• Serves on the Computer Security Incident Response Team (CSIRT) to helps plan and participate in regular incident response drills. Initiates security response procedures when a problem is detected. Resolves incident tickets addressed to Security team.
• Updates Computer Security Incident Response Team (CSIRT) documentation and procedures.
• Deploys security related products and projects. Manages and reviews log data from servers, network devices and workstations.
• Reviews user access to production systems and applications. Performs daily reviews of OS and network changes. Works with System Engineers and administrators to deploy patches and address vulnerabilities.
• Maintains security related servers including maintenance on security servers applying patches to OS and updating packages and applications.
• Manages security objects to include SSL Certificates, PGP and private keys, system passwords, anti-virus, spyware and malware solutions, and identity management.
• Maintains procedures and devices in compliance with Sarbanes Oxley, PCI regulations and other regulatory authorities as required by business.

Nature and Scope

• Demonstrates skill in data analysis techniques by resolving missing/incomplete information and inconsistencies/anomalies in more complex research/data.
• Nature of work requires increasing independence; receives guidance only on unusual, complex problems or issues. Work review typically involves periodic review of output by a supervisor and/or direct customers of the process.
• May provide general guidance/direction to or train junior level support or professional personnel.
• Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
• Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.
• Typically requires overnight travel 5% to 20% of the time.

Education and Experience

• Typically requires BS/BA in a related discipline. Generally 2-5 years of experience in a related field OR MS/MA and generally 2-4 years of experience in a related field. Certification is required in some areas.