Information Security Engineer

International Executive Service Corps; Lenexa, Northern (KS, KY); Hybrid; USD 95,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Life/AD&D

Supplemental Life/AD&D

Section 125 FSA Plan

401(k)

Short and Long-Term Disability

Paid Time Off

Holidays

Tuition Reimbursement

Job summary

International Executive Service Corps seeks an experienced IT security professional to identify, implement and monitor security systems for protecting computer networks and data.

You will coordinate security projects, define system requirements, develop SOPs, respond to incidents, and enforce Cloud and on-premise controls. The role requires SIEM, firewall, IAM, encryption, and compliance with SOC 2/ISO27001; on-site in Lenexa, Kansas with some travel as needed.

Qualifications

• Bachelor’s degree or equivalent in a related technical field.
• 8 years IT experience with increasing security responsibility.
• Certifications: CISSP (ISC2), GISCP (GIAC), GSLC (GIAC) or CSQE (ASQ) within 12 months.
• Experience designing secure networks, systems and applications.
• Proven ability to implement SOC, ISO27001 or similar controls.

Responsibilities

• Coordinate and execute IT security projects.
• Define system security requirements and implement controls.
• Develop security SOPs and policies aligned with best practices.
• Lead incident response, root-cause analysis and communications.
• Manage cloud and on-premise security (Azure/AWS, firewalls, encryption).
• Develop automated security solutions and perform vulnerability scans.
• Operate SIEM, monitor logs and respond to security events.
• Collaborate on IAM scope and access governance.
• Support disaster recovery and business continuity planning.

Skills

Anti-virus & IDS

Risk assessment

Secure network design

Disaster recovery

Security policies

Cloud security (Azure/AWS)

SIEM experience

Firewall management

MFA solutions

Scripting languages

Encryption

SOC/ISO27001 compliance

Education

Bachelor’s Degree in Information Systems, Computer Science, Information Security

Tools

SIEM (Splunk etc.)

Azure/AWS security tooling

Firewall management tools

Job description

GENERAL STATEMENT OF RESPONSIBILITY

Identify, implement and monitor security systems and processes for the protection of the computer systems, networks and data.

ESSENTIAL FUNCTIONS

• Coordinate and execute on IT security projects.
• Identify and define system security requirements.
• Assist with the development and documentation of Information Security standard operating procedures and policies ensuring best practices for the organization.
• Develop strategies to respond to and recover from a security breach. Take a lead role in investigating security incidents, communicate information to management as quickly as possible to minimize risks and assist in root cause analysis.
• Select, architect, operate and configure systems to protect data and information infrastructure, including firewalls, data encryption, network devices, Intrusion Prevention Systems, security appliances and software, etc.
• Develop automated solutions for repeatable tasks.
• Conduct periodic scans of the networks to identify vulnerabilities.
• Conduct penetration testing to identity system weaknesses or process failures and help to remediate vulnerabilities.
• Monitor the organizations networks and systems for security events.
• Monitor computing environment and infrastructure logs, and network traffic for activities including but not limited to policy violations, abnormal behaviors, attacks, intrusions, best practice recommendations and security events.
• Recommend and perform system hardening for OnPrem and Azure / AWS Cloud Environments.
• Collaborate with internal resources to properly scope Identity and Access Management, configure roles and monitor for compliance.
• Generate queries for correlation of logs and events using a SIEM solution.
• Certificate and Key generation, issuance and management.
• Assist with Data Classification within the environment and develop governance controls.
• Assist in complying with SOC 2 Type 2 controls.
• Help maintain high security standards within SDLC and CI/CD pipeline for development practices.
• Develop strategy and coordination of disaster recovery and business continuity planning.
• Maintain and protect the confidentiality of all CRL, CRL subsidiaries, legal entities and client information.
• Comply with all applicable federal, state, and local safety and health regulations that would apply to this job.
• Keep work area neat and clean.

Other duties as assigned.

JOB QUALIFICATIONS

EDUCATION

Bachelor’s Degree in Information Systems, Computer Science, Information Security or a related technical discipline, or the equivalent combination of education, professional training or work experience.

EXPERIENCE

• 8 years IT experience
• 5 years of security specific experience with increasing responsibility
• Qualifications to acquire CISSP (ISC2), GISCP (GIAC), GSLC (GIAC), or CSQE (ASQ) certification within 12 months of hire required.

SKILLS & ABILITIES

• Direct experience with anti-virus software, intrusion detection, firewalls and content filtering
• Knowledge of risk assessment tools, technologies and methods
• Experience designing secure networks, systems and application architectures
• Knowledge of disaster recovery, computer forensic tools, technologies and methods
• Experience in the development, deployment and maintenance of security policies, procedures, standards and strategies.
• Professional experience in a system administration role supporting multiple platforms and applications
• Ability to communicate network security issues to peers and management
• Ability to read and use the results of mobile code, malicious code, and anti-virus software
• Experience in Azure and/or AWS Cloud environments and associated security toolsets
• Experience managing security appliances e.g. F5, Firewalls, and SIEM solutions.
• Familiarity with IPS / IDS
• Experience with Web Security Proxies and Data DLP Solutions
• Experience creating queries with Splunk or other SIEM solution
• Knowledge of configuration and integration MFA solutions
• Working knowledge of Security Solutions.
• Understanding of the Encryption Protocols and managing high strength ciphers
• Working knowledge and understanding of SOC, ISO27001, or similar certification standards.
• Some scripting / Coding experience preferred: Bash, PowerShell, Java, .NET, Python, AWS CLI
• Ability to be at work and on time
• Ability and judgment to interact and communicate appropriately with other employees, clients and management

PHYSICAL REQUIREMENTS

The physical demands described here are representative of those that must be met to successfully perform the essential functions of this job. Reasonable accommodations may be available to enable qualified individuals with disabilities to perform the essential functions.

The following physical attributes are required for this position:

• Sitting for extended lengths of time
• Close vision requirements due to computer work
• Repetitive use of hands, fingers, wrists, and elbows for operating a computer and telephone
• Light lifting, up to 10 pounds

EQUIPMENT

PC and communications equipment

OTHER

Overtime and weekend work as necessary according to workload and/or projects; occasional travel is required; this is an “on-call” position requiring the use of wireless phone for after-hours contact.

The employer shall, in its discretion, modify or adjust this position to meet the company’s changing needs.

This job description is not a contract and may be adjusted as deemed appropriate in the employer’s sole discretion.

denotes essential job function

An Equal Opportunity Employer

Pay Range

$95,000 - $180,000

Starting Pay Range

$95,000 - $115,000

Benefits for Full Time Employees

• Medical, Dental, Vision
• Life/AD&D
• Supplemental Life/AD&D
• Section 125 FSA Plan
• 401(k)
• Short and Long-Term Disability
• Paid Time Off
• Holidays
• Tuition Reimbursement