Security Engineer (DLP)

InterEx Group; Randstad; On-site; EUR 70,000 - 100,000; Full time

Job summary

InterEx Group is seeking a Senior Security Engineer to develop, implement, and manage the Firm’s information security infrastructure. The role focuses on protecting data, systems, and facilities in line with security policies and standards, including forensics and security awareness initiatives.

The engineer will provide 3rd-level support, assess processes, and interact with internal customers while occasionally traveling for audits and engagements.

Qualifications

• Thorough understanding of security concepts and best practices.
• Ability to analyze facts, draw conclusions and suggest solutions.
• Proficient in English communication, both written and spoken.

Responsibilities

• Provide 3rd-level support and engineering for security systems.
• Assist in policy creation and reviews for information security.
• Interfacing with internal customers and technical groups; support audits/forensics.
• Participate in IT disaster recovery and continuity planning.
• Monitor compliance with security policies and report to Security Manager.

Skills

Security concepts

Analytical thinking

English communication

Independent work

Tools

SIEM

IDS

Vulnerability scanners

DLP

Job description

*** LARGEST LAW FIRM GLOBALLY BY HEADCOUNT + REVENUE ***

The Security Engineer develops, implements, and provides 3rd-level support for the Firm’s information technology infrastructure. The engineer will assist in the creation, implementation and ongoing management (including forensics) of security-related systems. The position’s primary focus is the protection of data, systems, and facilities to ensure the protection, confidentiality, and integrity of the Firm in compliance with organizational policies and standards. The Senior Security Engineer will also provide input into the development of security awareness and training initiatives.

Key responsibilities of this position include:

The position is responsible for 3rd-level support and engineering of the Firm’s security systems. The individual is expected to critically analyze processes and procedures and suggest improvements. Some interfacing with internal customers and technical groups should be expected. Travels occasionally to provide information security services and engage in audits/assessment/forensics.

Additional responsibilities include:

• Architect, implement and support solutions identified as necessary for the protection of Firm assets.
• Provide input, create documentation, and review information security policies and procedures.
• Utilize a common security toolset (SIEM, sniffer, IDS, vulnerability scanner, etc., to identify issues and analyze compliance with existing policies and procedures.
• Provide reports to the Information Security Manager.
• Maintain the Firm’s security-related information repositories (web, database, SharePoint)
• Monitor and report on compliance with the Firm’s information security policies and procedures.
• Monitor internal control systems to ensure that appropriate information access levels and security clearances are maintained.
• Perform formal/informal security risk assessments by leveraging knowledge gained via daily analysis and review.
• Report compliance failures to appropriate management for immediate remediation.
• Participate in the definition of the organization’s IT disaster recovery and continuity plans for information systems.
• Serve as an internal information security consultant to the Security Team by monitoring information security technologies and trends.
• Serve as a 3rd-level support resource for the purposes of ticket resolution and change management activities.
• Analyze, recommend, and implement controls as determined necessary by the Security Manager.
• Support standard Firm desktops & notebooks as well as server-based hardware and software related to security applications and utilities. Utilizes remote control and remote access software in the performance of her/his duties.
• Utilize standard security tools such as a SIEM, endpoint/network protection technologies, DLP, two-factor, vulnerability scanners, custom scripts, and packet analyzer.
• Capable of moving 40 pounds of material or equipment without assistance as required.

Knowledge and Skills:

• Thorough understanding of security concepts and best practices.
• Proficient in the use of Microsoft Excel, Access and Word.
• Experience with Wide Area and Local Area Networks.
• Authoritative understanding of data communications and information systems hardware and software.
• Authoritative understanding of principles, theories, techniques, and methods of information system analysis and programming, particularly secure coding practices.
• Thorough knowledge of data processing and data communications concepts and services.
• Thorough knowledge of computer monitoring systems, vendor-supplied packaged programs, macros, utilities, and other highly technical programs.
• Ability to gather and analyze facts, draw conclusions, define problems, and suggest solutions.
• Ability to adapt, integrate, and modify existing programs or vendor-supplied package programs for use with existing information systems.
• Capable of providing assistance with the preparation of training and informational sessions.
• Proficiency in oral and written English.
• Ability to be productive and maintain focus without direct supervision