Cloud Systems Engineer - Security

firstPRO, Inc; West Chester (Chester County); On-site; USD 120,000 - 180,000; Full time

Job summary

firstPRO, Inc. is seeking a Senior Systems Engineer – Cyber Security to establish and promote security policies, ensure regulatory compliance, and protect organizational information.

You will oversee user access provisioning, network security, and monitoring, while evaluating security technologies and leading security-focused projects to meet business and technical requirements. Collaboration across IT teams is essential to success.

Qualifications

• Bachelor's degree in a related field or equivalent professional experience required.
• Advanced degrees and industry certifications are preferred.
• Minimum of six years of relevant functional experience.
• Firewall technologies and hardware/software platforms, including Cisco ASA and Palo Alto.
• Proxy filtering technologies, such as Blue Coat Proxy.
• Centralized logging configuration and analysis tools, such as Splunk.
• Intrusion Detection and Prevention Systems (IDS/IPS) configuration and analysis.
• Single Sign-On (SSO) infrastructure, including CA SiteMinder, LDAP, and RSA Identity Management.
• Network vulnerability scanning tools, including Nessus/Tenable.
• Advanced user authentication technologies, such as Cisco ACS and RSA ACE servers.
• Operating system hardening and security across IBM i, Linux, macOS, and Windows environments.
• Application vulnerability scanning and remediation.
• TCP/IP networking fundamentals and packet analysis tools, including tcpdump and Wireshark.
• Endpoint protection platforms, such as CrowdStrike and McAfee.
• Data encryption technologies and implementation.
• SOX and PCI compliance requirements, controls, and auditing practices.
• One to two years of project management experience, including oversight of medium-to-large-scale initiatives.
• Industry-recognized IT security certification, such as CISSP or CISM, preferred.

Responsibilities

• Develop, implement, and communicate security policies and procedures while ensuring employees adhere to established security standards.
• Oversee user access provisioning, administer network security permissions, and monitor system usage to protect sensitive organizational information.
• Conduct security assessments and establish security frameworks and models for newly implemented systems.
• Evaluate, research, and recommend security products and technologies based on functionality, performance, and organizational needs.
• Manage and maintain firewall security across networks, servers, and workstations.
• Implement and support network and application vulnerability scanning, security logging, and intrusion detection capabilities.
• Review and audit access to business-critical applications while maintaining documentation required for SOX, PCI, and other regulatory compliance standards.
• Evaluate annual SOX and other compliance reports to identify potential risks, gaps, and areas requiring improvement.
• Partner with cross-functional IT teams to assess and resolve technical and security-related challenges and support the development or enhancement of security infrastructure.
• Lead and coordinate one to three large-scale, cross-functional projects simultaneously, as assigned by departmental and senior leadership.
• Provide technical guidance, mentorship, and support to Security Engineers, Security Administrators, and offshore contractors.
• Review application and system access to identify exceptions, evaluate last-use activity, and determine whether existing access permissions remain necessary.
• Update and maintain security configurations and access control files to support new software implementations, resolve system issues, and modify user access privileges.
• Implement encryption technologies to protect sensitive data transmissions and configure and maintain firewalls to prevent unauthorized access and malicious data transfers.
• Design, implement, and maintain intrusion detection processes, systems, and supporting infrastructure.
• Develop, test, and document cybersecurity policies, procedures, and emergency response measures.

Skills

Security policy development

Security governance

Leadership / mentorship

Project management

Cross-functional collaboration

Compliance awareness (SOX/PCI)

Education

Bachelor's degree in a related field

Advanced degree or professional certifications preferred

CISSP or CISM certification preferred

Tools

Cisco ASA

Palo Alto

Blue Coat Proxy

Splunk

Nessus/Tenable

CA SiteMinder / LDAP / RSA IDM

tcpdump / Wireshark

CrowdStrike / McAfee

Job description

The Senior Systems Engineer – Cyber Security is responsible for establishing and promoting security policies, ensuring compliance with established security standards, and protecting organizational information and technology resources. This role oversees user access provisioning, network security administration, and monitoring of system activity to maintain the confidentiality and integrity of company data.

The position also evaluates and recommends security technologies, assesses their effectiveness, and leads security-related projects and implementations to ensure business and technical requirements are met.

Additional responsibilities include:

• Develop, implement, and communicate security policies and procedures while ensuring employees adhere to established security standards.
• Oversee user access provisioning, administer network security permissions, and monitor system usage to protect sensitive organizational information.
• Conduct security assessments and establish security frameworks and models for newly implemented systems.
• Evaluate, research, and recommend security products and technologies based on functionality, performance, and organizational needs.
• Manage and maintain firewall security across networks, servers, and workstations.
• Implement and support network and application vulnerability scanning, security logging, and intrusion detection capabilities.
• Review and audit access to business-critical applications while maintaining documentation required for SOX, PCI, and other regulatory compliance standards.
• Evaluate annual SOX and other compliance reports to identify potential risks, gaps, and areas requiring improvement.
• Partner with cross-functional IT teams to assess and resolve technical and security-related challenges and support the development or enhancement of security infrastructure.
• Lead and coordinate one to three large-scale, cross-functional projects simultaneously, as assigned by departmental and senior leadership.
• Provide technical guidance, mentorship, and support to Security Engineers, Security Administrators, and offshore contractors.
• Review application and system access to identify exceptions, evaluate last-use activity, and determine whether existing access permissions remain necessary.
• Update and maintain security configurations and access control files to support new software implementations, resolve system issues, and modify user access privileges.
• Implement encryption technologies to protect sensitive data transmissions and configure and maintain firewalls to prevent unauthorized access and malicious data transfers.
• Design, implement, and maintain intrusion detection processes, systems, and supporting infrastructure.
• Develop, test, and document cybersecurity policies, procedures, and emergency response measures.

Required Qualifications

• Bachelor's degree in a related field or equivalent professional experience required. Advanced degrees and industry certifications are preferred.
• Minimum of six years of relevant functional experience.
• At least six years of hands-on experience and advanced technical knowledge in the following areas:
• Firewall technologies and hardware/software platforms, including Cisco ASA and Palo Alto.
• Proxy filtering technologies, such as Blue Coat Proxy.
• Centralized logging configuration and analysis tools, such as Splunk.
• Intrusion Detection and Prevention Systems (IDS/IPS) configuration and analysis.
• Single Sign-On (SSO) infrastructure, including CA SiteMinder, LDAP, and RSA Identity Management.
• Network vulnerability scanning tools, including Nessus/Tenable.
• Advanced user authentication technologies, such as Cisco ACS and RSA ACE servers.
• Operating system hardening and security across IBM i, Linux, macOS, and Windows environments.
• Application vulnerability scanning and remediation.
• TCP/IP networking fundamentals and packet analysis tools, including tcpdump and Wireshark.
• Endpoint protection platforms, such as CrowdStrike and McAfee.
• Data encryption technologies and implementation.
• SOX and PCI compliance requirements, controls, and auditing practices.
• One to two years of project management experience, including oversight of medium-to-large-scale initiatives and the ability to manage multiple projects concurrently.
• Industry-recognized IT security certification, such as CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager), preferred.