Information Security Engineer

First Quality; Pennsylvania; A distancia; USD 90.000 - 130.000; Jornada completa

Descripción de la vacante

First Quality Tissue Enterprises, LLC is seeking an Information Security Engineer to work remotely in the Eastern Time Zone. The role provides leadership and technical security expertise across IT solutions to protect confidentiality, availability and integrity of information assets.

The ideal candidate will lead security tool SME efforts, drive vulnerability management, and shape security standards and baselines for company-wide projects, with up to 10% travel annually.

Formación

• Minimum 2 years of experience running security solutions on network/security engineering/security operations.
• Knowledge of IT security controls - firewalls, SIEM platforms, NAC, CASB, DLP, IPS/IDS, encryption, authentication, tokenization, XDR/EDR tools and desktop virtualization security.
• Working knowledge of Microsoft OS for Workstations/Servers, UNIX, firewall multi-layer design, WANs/LANs/networks, VPN/TLS/SSH/SFTP/TCP/IP, security assessment tools, vulnerability scanners, IPS/IDS, VMware/VDI, PKI.
• Experience with cloud security solutions and Palo Alto Firewalls Suite (certification highly preferred).
• Broad knowledge of network security practices, architectures, and technologies; ability to create security documentation.

Responsabilidades

• Lead SME for security tools like CASB, vulnerability scanning suite and EPP to maintain tool functionality.
• Lead vulnerability management program with patching team to limit attack surface.
• Provide security engineering expertise for company projects; implement standards and baselines.
• Investigate and implement solutions for detection, prevention, containment and deterrence of data and network security risks.
• Define security product requirements; conduct research, evaluation, testing, configuration and implementation (identity management, access control, IPS/IDS).
• Ensure incident response procedures are up to date; support periodic CIRT activations.
• Use process tools to track security system administration requests and events.
• Generate reporting for admins, leadership and end-users; implement cost-effective event correlation.
• Author security system and application process documentation; builds and as-builts.

Conocimientos

Security engineering

Vulnerability management

Threat detection

Educación

Bachelor degree or equivalent in CS/EE/Networks

Herramientas

CASB

Vulnerability Scanning Suite

EPP

Firewalls

SIEM

NAC

DLP

IPS/IDS

VMware

VDI

PKI

Palo Alto Firewalls Suite

Descripción del empleo

We are seeking an Information Security Engineer for our First Quality Tissue Enterprises, LLC, working remotelyin the Eastern Time Zone. This position provides leadership as well as in-depth expertise in all security aspects surrounding the implementation and operation of Information Technology solutions to improve the ability of the organization to protect the confidentiality, availability, and integrity of its information assets.

Primary responsibilities include:

• Be or become the lead SME for various security tools including CASB, the Vulnerability Scanning Suite, EPP, etc to maintain and improve the functionality of our security tools.
• Lead vulnerability management program working closely with the patching team to limit the vulnerability attack surface.
• Provide technical engineering security expertise for company-wide projects, implementing security standards and baselines, and researching advancements in all security technologies that would benefit secure business growth.
• Investigate, recommend, and assist with implementing security solutions that provide detection, prevention, containment, and deterrence mechanisms to protect and maintain the integrity of data and network resources.
• Define security product requirements, conduct research, evaluation, testing, configuration, and implementation, to include identify management, access control, and intrusion prevention solutions.
• Ensure guiding procedures for incident response are in place, effective and up to date, to include periodic computer incident response team (CIRT) activation to validate response procedures.
• Use process management tools to track information about security systems administration requests and security events.
• Track, generate and provide effective reporting for use by system administrators, business leadership and end-users; recommends and implements an effective event correlation solution that analyses the output from these and other security tools in a cost-effective manner.
• Author security system and application processes for both operation and management, including as-build service configuration documents.
• This role requires the ability to travel up to 10% annually.

The ideal candidate should possess the following:

• Minimum 2 years of experience running security solutions on network/security engineering/security operations.
• Knowledge of IT security controls - firewalls, SIEM platforms, NAC, CASB, DLP, IPS/IDS, encryption, authentication, tokenization, XDR/EDR tools and desktop virtualization security.
• Working knowledge of the following technologies: Microsoft OS for Workstations/Servers , UNIX, firewall multi-layer design and implementation,, WANs, LANs, internet, intranets and network protocols (i.e., VPN, TLS, SSH, SFTP, TCP/IP, etc), security assessment tools, vulnerability scanners, intrusion prevention systems, VMware, VDI, encryption, public key infrastructure (PKI).
• Experience with cloud security solutions.
• Experience working with Palo Alto Firewalls Suite (certification highly preferred).
• Broad knowledge of network security practices, designs, methodologies, tools, and processes.
• Comprehensive knowledge of network architectures, equipment, and designs.
• Knowledge of vulnerability scanners and how to successfully implement and maintain an enterprise patching program.
• Security risk assessment skills.
• Working knowledge of information security related technologies and product.
• Bachelors’ Degree or Equivalent Experience in Computer Science, EE, Data Network Security Architecture and Design.
• Proven abilities to analyze security risks, provide remediation recommendations and create comprehensive security documentation.