Security Engineer

RouteOne; Farmington Hills (MI); On-site; USD 85,000 - 115,000; Full time

Job summary

RouteOne is looking for a Security Engineer to implement proactive improvements in information security and safeguard the organization’s systems. You will analyze potential vulnerabilities, manage various security tools, and conduct internal audits.

This role requires a solid understanding of security technologies along with experience in systems administration and vulnerability analysis. Candidates should have a bachelor's degree or equivalent experience in the field.

Qualifications

• Solid technical understanding of a wide range of security technologies and protocols.
• Knowledge of weaknesses and vulnerabilities in information systems.
• Research experience with new security trends and developments.

Responsibilities

• Install and maintain software to secure information systems.
• Respond to and investigate security incidents.
• Oversee security for internal and external systems.
• Participate in security audits and assessments.

Skills

Implementing/managing security tools (SIEM, vulnerability scanning, anti-virus, EDR, etc.)

Systems administration

Red teaming

Vulnerability analysis and management

Programming/scripting

Experience with M365, Splunk, Cloudflare, Proofpoint

Education

Bachelor's degree or 5+ years of relevant experience

Job description

The Security Engineer is responsible for implementing proactive and responsive improvements in information security. The Security Engineer should understand common security controls and requirements as well as be able to "think like a hacker" and then be able to participate in researching, developing, and implementing solutions. Typical tasks include setting up new security rules and alerts, creating and administering vulnerability scanning programs, and implementing and managing new security tools, processes, and procedures.

Job Responsibilities

• Install security measures and operate software to monitor, analyze, and maintain systems and procedures to safeguard information systems, networks, databases, and external services
• Install security measures and operate software to identify potential security breaches and intrusions
• Utilize "red teaming" and adversarial tactics against information systems, networks, databases, and external services to discover vulnerabilities and weaknesses
• Implement vulnerability discovery tools and assist and monitor remediation efforts
• Recommend, implement, and work with other teams to make changes and instill best practices to enhance security
• Respond to alerts from information security tools and other sources
• Report, investigate, and assist in the resolution of security incidents
• Oversee internal or external systems security (i.e., cloud services)
• Participate in internal and external information security audits
• Design and develop security controls and work with other teams to ensure compliance with regulations, privacy laws, and audit requirements
• Be a subject matter expert for the company on IT security-related events, news, and issues
• Maintain safety, security, and privacy standards throughout all areas of responsibility.

Knowledge

• Solid technical understanding of wide range of security technologies, protocols, and standards (e.g., Active Directory, multi-factor authentication, networking, DNS, etc.)
• Solid technical understanding of weaknesses, vulnerabilities, and exploit techniques
• Awareness of security trends and developments

Skills

• Implementing/managing security tools (SIEM, vulnerability scanning, anti-virus, EDR, etc.)
• Systems administration
• Red teaming
• Vulnerability analysis and management
• Programming/scripting
• Experience with M365, Splunk, Cloudflare, Proofpoint and New Relic supporting our businesses SaaS based platform.

Abilities

• Ability to work in a team environment
• Ability to communicate information and ideas, both verbally and in writing, so others will understand
• Ability to thrive in dynamic, fast-paced software development environment
• Proactive, detail-oriented professional
• Ability to establish priorities, work in independent and team situations, and proceed with objectives as needed
• Ability to work with all levels within the organization
• Flexibility to adjust to changing priorities and simultaneously work on high visibility projects to assure completion
• Ability to take a practical business-focused approach to IT Security
• Strong analytical, problem-solving, communication, and technical skills

Other Essential Requirements

• Requires a bachelor's degree (or international equivalent) or 5+ years of relevant experience.