Job Alert: IT Security Engineer

Stone Arch Services; Indiana (PA); On-site; USD 90,000 - 130,000; Full time

Job summary

Stone Arch Services is seeking an IT Security Engineer to ensure secure operation of in-house systems, servers, and network connections. The role includes analyzing logs, updating virus scans, and addressing security breaches promptly.

The candidate will support vulnerability assessments, incident response, and security policy development while collaborating with IT teams to strengthen defenses and maintain compliant operations across the organization.

Qualifications

• High School Diploma or GED required.
• 5+ years of IT experience with a focus on governance, security incident response, and compliance.

Responsibilities

• Participates in the planning and design of enterprise security architecture.
• Participates in the creation of enterprise security documents (policies, standards, baselines, guidelines and procedures).
• Provides information security SME regarding planning and design of business continuity and disaster recovery plans.
• Maintains up-to-date knowledge of IT security industry and threat vectors.
• Evaluates and recommends additional security solutions to improve enterprise security.
• Participates in deployment, integration and configuration of new security solutions.
• Maintains baselines for secure configurations of devices and AV/spam/malware administration.
• Designs and executes vulnerability assessments, penetration tests and security audits.
• Reviews security alerts and communicates risks with leadership.
• Oversees reporting on network security program and incident response processes.
• Collaborates with Network Engineering on firewall, web proxy, and IDS/IPS.
• Creates and maintains documentation of security configurations and processes.
• Participates as a senior SOC member in detection, analysis, containment and eradication of attacks.

Skills

Analytical reasoning

Problem solving

Communication skills

Security incident response

Ability to prioritize tasks

Education

High School Diploma or GED

Post-secondary degree

GIAC Security Fundamentals

CISSP

CCSP

CCNP-Security

CEH

CISM

CISA

Tools

McAfee

Cisco

Juniper

Sourcefire

Symantec

Qualys

SIEM tools

Orion

Lieberman

Job description

IT Security Engineer

Stone Arch Services has a client in need of a full‑time IT Security Engineer for a nonprofit company that sponsors programs to help students and families plan and pay for college. The company works with schools and loan servicers to lower student loan default rates, promote financial literacy and provide resources to support student loan borrowers to successfully repay their loans.

Stone Arch Services has a client in need of a full‑time IT Security Engineer for a nonprofit company that sponsors programs to help students and families plan and pay for college. The company works with schools and loan servicers to lower student loan default rates, promote financial literacy and provide resources to support student loan borrowers to successfully repay their loans. For postsecondary institutions, this company offers a suite of services that includes financial literacy, student loan repayment counseling and default prevention. This line of business is a natural adjacency to their role as a guaranty agency as it expands the reach to help student loan borrowers successfully meet their student loan obligations. This is a really great company with a great mission. The benefits are also very strong. The corporate office is currently in Oakdale, but will be moving to Washington Ave in Minneapolis in September 2016.

Description

Position Summary:

Ensures the secure operation of the in‑house computer systems, servers, and network connections. This includes occasional analysis of server and firewall logs, network traffic, establishes and updates virus scans, and troubleshooting. Analyzes and resolves security breaches and vulnerability issues in a timely and accurate fashion. Conducts user activity audits to regulate access to computer data files and prevent unauthorized modification, destruction, or disclosure of information.

Essential Duties And Responsibilities

• Participates in the planning and design of enterprise security architecture
• Participates in the creation of enterprise security documents (policies, standards, baselines, guidelines and procedures)
• Provides Information Security subject matter expertise regarding the planning and design of an enterprise Business Continuity Plan and Disaster Recovery Plan
• Maintains up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors
• Evaluates and recommends additional security solutions or enhancements to existing security tools to improve overall enterprise security
• Participates in the planning, deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions
• Maintains up-to-date baselines for the secure configuration and operations of all in-place devices (i.e., security tools, workstations, servers, network devices, etc.) through anti-virus, spam, and malware administration and management, including security applications and hardware
• Participates in the design and execution of vulnerability assessments, penetration tests and security audits
• Reviews security alerts and vulnerabilities, and communicates accordingly with appropriate department leaders and data owner and managers; reviews agency information systems and provides written reports of potential security risks and recommended solutions
• Oversees management reporting regarding the IT departments overall network security program
• Participates in the incident reporting and incident response processes and procedures to address security incidents and breaches, and reports of violation of policy; serves as a point of contact for information security inquiries and audits
• Collaborates with the Network Engineering team regarding network security, including firewall administration, web proxy administration, and intrusion detection/prevention systems
• Creates and maintains documentation of network security configurations and processes
• Participates as a senior member of the Security Operations Center (SOC) in the effective detection, analysis, containment, and eradication of attacks
• Works with internal and external project managers to complete projects on time, and leads or participates in IT projects to provide information security expertise, guidance, or training
• Provides mentoring to junior members of the team as needed
• Complies with all company Group Policies
• Performs other duties as assigned

Qualifications

EDUCATION and EXPERIENCE Required:

• High School Diploma or GED
• 5+ years of IT experience with a focus on governance, security incident response, and compliance required

Preferred

• Post-secondary degree
• One or more of the following certifications:
• GIAC Security Fundamentals
• Certified Information Systems Security Professional (CISSP)
• Cisco Certified Security Professional (CCSP)
• Cisco Certified Network Professional‑Security (CCNP‑Security)
• CEH
• CISM
• CISA
• Experience preferred on the following:
• Anti‑Virus, Spam and Malware Tools, Management and Administration
• Incident Response Practices and Procedures
• Firewall Management and Administration
• Security information & Event Management (SIEM) and Logging
• Vulnerability Assessment Practices/Technology (i.e., Operating Systems, Network, Application, Database, and Web)
• Penetration testing ability and knowledge
• Security Industry Standards, such as ISO, NIST, FISMA, and PCI
• Information Security Policy and Standards
• Information Security Risk Assessment and Audits
• Computer Forensic Practices and Procedures
• Scripting knowledge (python, Perl, some shell, Linux scripting)
• Experience preferred with McAfee, Cisco, Juniper, Sourcefire, Symantec, Qualys, Orion, Lieberman, SIEM tools (all: or similar products)

KNOWLEDGE, SKILLS And ABILITIES Required

• Proven analytical and problem‑solving abilities
• Ability to effectively prioritize and execute tasks in a high pressure environment
• Excellent written, verbal, and interpersonal communication skills with the ability to have one‑on‑one communication as well as to a large group
• Ability to conduct research into IT security issues and products as required
• Ability to maintain confidentiality required
• Ability to logically and creatively analyze and correlate disparate events and draw relevant conclusions to contribute to process improvement and incident remediation
• Ability to respond immediately to information security threat situations that negatively impact the company
• Displays and promotes high standards of ethical conduct and behaviors consistent with the company’s core values and government standards
• Ability to effectively organize, plan, control and prioritize concurrent work. Ability to regularly communicate progress to appropriate stakeholders. Efficiently manages resources and understands work and project scope, key players, urgency, inherent risks and business benefits
• Ability to consistently carry out job responsibilities to meet deadlines, while demonstrating independent work skills
• Demonstrates the ability to, independently and within a team, analyze, identify and solve problems and implement secure solutions to meet business needs.
• Ability to anticipate, understand and manage customer expectations and appropriate service delivery