Info Security Engineer- Vulnerability and Exposure Management

University of Phoenix; Phoenix, Northern (AZ, KY); Hybrid; USD 72,000 - 146,000; Full time

Benefits offered by this job

Medical, dental and vision plans

401(k) match

Tuition discount for you and dependap…

Job summary

University of Phoenix is hiring an Information Security Engineer focused on Vulnerability and Exposure Management. You will interact with customers, developers, analysts, and compliance teams to support external projects and configure security technologies.

You will lead incident response efforts, provide SME guidance on security tools, and support audits and risk management across Windows, UNIX/Linux platforms. A strong collaboration mindset is required.

Qualifications

• High School Diploma or GED required; 4+ years in information security roles preferred.
• Experience with network and security components including firewall, IDS/IPS, anti-malware, forensics tools, data encryption, VPNs, vulnerability scanners.
• Knowledge of IAM and directory services (Active Directory, LDAP) is desirable.

Responsibilities

• Act as the primary contact for Information Security Operations issues.
• Manage multiple security projects simultaneously.
• Maintain hardware and software tools supporting Information Security Operations.
• Provide guidance as a technical advisor to less experienced Security Analysts.
• Lead incident response and investigations of suspected security events or audits.
• Assist responses to audits, e-Discovery, pen tests and vulnerability assessments.
• Coordinate maintenance of security systems (Anti-Virus, IDS, logging, content filtering).
• Review system designs and security recommendations for architectures.
• Contribute to enterprise Information Security policies and standards.
• Train new Security Analysts on security technologies.

Skills

Information Security

Incident Response

Security Audits

Communication

Team Collaboration

Education

High School Diploma or GED

Tools

Firewalls

IDS/IPS

Forensics Tools

Encryption

Windows/Linux

Job description

About Us

University of Phoenix is a leading higher education institution founded in 1976 by Dr. John Sperling. Our mission is to improve the lives of our students, their families and future generations through higher education. Our values (which hopefully you share) are: Brave. Honest. Focused.

Our University values and embraces all team members and their unique perspectives. We fundamentally believe in fostering an environment which deeply respects, celebrates, and actively encourages a diverse workforce. We are committed to hiring – and learning from – those who share our passion to help others achieve their educational aspirations.

We offer excellent benefits, an effective recognition program, and outstanding learning and development tools, including tuition vouchers for employees and their qualified family members.

About the Position

An Information Security Engineer- Vulnerability and Exposure Management supports information security functions across the enterprise. Interacts closely with customers, software developers, information security analysts, compliance, and other key stakeholders in order to support external projects, configure security technologies, train Information Security Analysts, provide security technology escalation support, lead incident response efforts and remediate security issues. Serves as a primary information security interface and knowledge support to all University of Phoenix Technology functional groups and project teams. Serves as Subject Matter Expert (SME) for Information Security Operations portfolio of tools, providing research, expert advice, and direction on configuration and management of the tools.

What You’ll Do

• Act as a primary point of contact for all issues related to Information Security Operations.
• Manage multiple security projects simultaneously.
• Maintain hardware and software tools used to support Information Security Operations functions.
• Act as a technical or security advisor for less experienced Security Analysts.
• Lead incident response and investigations of suspected information security events, misuse, or compliance reviews.
• Assist in responses to internal and external compliance audits, e-Discovery data collection, penetration tests and vulnerability assessments.
• Coordinate maintenance of security-related systems (Anti-Virus, Intrusion Detection, Logging, Content filtering, etc.).
• Review system designs and architectures and make security-related recommendations.
• Provide input to enterprise- Information Security policies and standards.
• Trains new Security Analysts on cutting edge security technologies.
• Perform other duties as assigned.

NOTE: The primary accountabilities above are intended to describe the general content and requirements of this position and are not intended to be an exhaustive statement of duties. Incumbents may perform all or most of the primary accountabilities listed above. Specific goals or responsibilities will be documented in the incumbents’ performance objectives as outlined by the incumbents’ immediate supervisor or manager.

Job Supervisory Responsibilities

None

MINIMUM EDUCATION AND RELATED WORK EXPERIENCE:

• High School Diploma or GED
• Four (4) years of progressive experience in Information Security related roles
• Four (4) years of experience with network and Security components, including firewall, intrusion detection/prevention systems, anti-malware products, forensics tools, data encryption, VPNs, vulnerability scanners, multiple operating systems (Windows, UNIX, Linux, etc.), Identity and Access Management, and directory services (Active Directory, LDAP)

ADDITIONAL QUALIFICATIONS:

• Experience with Pen testing
• Experience with Exposure Management/Vulnerability Management
• Experience with Automation
• Experience managing a varied and heavy workload
• Security related certifications e.g., CISSP, CISM, CISA, SANS (GESC, GCIA, etc.)
• Knowledge of industry frameworks related to information security (e.g., ISO 27000, NIST, etc.)
• In-depth knowledge of Information Security risks and countermeasures for Windows (PC and servers), MAC, Unix/Linux platforms
• Experience with risk management methodologies and frameworks
• A practical understanding of implementing technologies and processes in support of regulatory requirements (PCI, SOX, GLBA)
• Strong written and verbal communication skills
• Strong business analysis skills
• Strong communication skills required to discuss and present complex engineering principles
• Ability to work effectively in a collaborative team environment as an individual contributor
• Ability to provide support after normal business hours, as needed (e.g., on-call rotation participation)
• Resourceful, creative, innovative, results driven, and adaptable

As an Equal Opportunity employer, we particularly encourage applications from members of historically underrepresented racial/ethnic groups, women, individuals with disabilities, veterans, LGBTQ community members, and others who demonstrate the ability to help us achieve our vision of a diverse and inclusive community.

If you are an active-duty military member seeking employment when off-duty, compliance with Department of Defense Joint Ethics Regulation, 5500-7-R, is required prior to starting employment with University of Phoenix. You are advised to contact your base Judge Advocate General to seek such approval and answer any questions.

Pay Range

The annual pay range for this position is $72,400 (minimum), $109,300 (midpoint), and $146,200 (maximum).*

*Typical hiring range is between the minimum and midpoint of the above pay range. Actual starting base pay may vary based on factors such as education, experience, skills, location and budget. Compensation above the midpoint is generally associated with experienced, long-tenured employees who have demonstrated sustained performance and expertise in the role.

Your work is critical to helping adult learners achieve their dreams, and we’re committed to rewarding you for your efforts. We offer a competitive, comprehensive total rewards package designed to help you achieve your health, financial, educational and work-life balance goals.

Full-time employees are eligible for:

• Medical, dental and vision plans; Flexible Spending Accounts; Health Savings Accounts; Life and Disability insurance; and our Wellness incentive program;
• Competitive 401(k) employer match;
• Substantial tuition discount for you and eligible dependents; and,
• A generous time off package, including paid vacation, sick time and company holidays.*

*For more details around paid time off benefits, please click here .