Security Engineer

PRI Technology; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

PRI Technology is seeking an Information Security Architect in New York to design and govern security architecture across on‑prem and cloud environments. You will align controls with policy and drive secure by design initiatives.

You will monitor security events, manage vulnerability programs, report findings to leadership, and coordinate upgrades and incident response activities. Strong communication and strategic thinking are essential.

Qualifications

• Sound analytical and operational judgment under stress.

Responsibilities

• Monitor and manage information security systems on‑prem and in the cloud.
• Report exceptions to policies and standards to CISO.
• Execute threat management process and document remediation.
• Develop and sustain Vulnerability Management Process.
• Provide reports with actionable info on vulnerabilities and trends.
• Monitor security logs and coordinate remedial actions.
• Review changes affecting security posture.
• Coordinate upgrades and support for security products.
• Provide consultative direction on security architecture standards.
• Communicate strategically and tactically to support global security functions.
• Work under pressure and coordinate projects with cross‑team stakeholders.

Skills

Analytical judgment

Interpersonal communication

Collaboration and teamwork

Security domains knowledge

Strategic and tactical thinking

Coping under pressure

Education

Bachelor's degree in Engineering or Computer Science

Job description

• Perform continuous monitoring of the company’s information security systems both on-prem and in the cloud, technologies, processes, and procedures, analyzing the findings and communicating exceptions, concerns and remedial steps to the Chief Information Security Officer and Management as necessary
• Promptly report any and all exceptions to policies, procedures, and operational standards to the Chief Information Security Officer as necessary
• Execute the company’s information security threat management process, ensuring all aspects of an event are documented and remediated, and communicated to the Director, Information Security
• Develop and sustain an operationally efficient Vulnerability Management Process
• Provide customized reports with actionable information to assist with the resolution and completion of activities related to asset vulnerabilities, articulate the current state of vulnerabilities within the enterprise or provide detailed trending of current and historical data designed to highlight changes in security posture and work accomplished
• Monitor and analyze security relevant logs, events, and alerts including, but not limited to, logs from systems, applications, SIEM, AV, Firewalls, file systems, and IPS; document relevant incidents and suggest/co-ordinate appropriate remedial actions
• Review all operational, hardware, and software changes that may impact the firms standard information security posture
• Participate in projects, programs, and initiative to ensure implementation of and adherence to the company’s information security technology policies, procedures, processes, and technologies
• Coordinate upgrades, administration and troubleshooting support for all information security products in the Firm's information processing environment, submit and monitor product support requests, coordinate troubleshooting efforts, and drive the Firm's standard issue resolution process to conclusion
• Provide consultative direction and advice regarding to information security architectural standards, technologies, policies, and procedures for all company offices and facilities
• Exhibit the ability to think and act strategically as well as tactically, utilizing interpersonal and written and verbal communication skills to effectively support the company’s global information security functions
• Demonstrate calm, logical, analytical decision-making abilities and possess good interpersonal and communication skills
• Must work well under pressure, and be able to coordinate project work with others inside and outside the department. Able to respond to and remediate information security events that arise unpredictably, and have a good overall understanding of the required work to maintain a highly secure environment

Skills & Qualification

• sSound analytical and operational judgment, the use of tact in daily and stressful situations, and sound analytical rigor applied to supporting and remediating events in the company’s information security systems, processes, and procedure
• sGood interpersonal, communication, organization, collaboration, and team-building skill
• sSubstantial knowledge of and experience in two or more of the core security domains including, but not limited to, the following: Endpoint protection, Incident response, IAM, Security Operations, Application and Data security, Infrastructure, Virtualization, Mobile Security, and cloud monitorin
• gSubstantial experience in designing and deploying information technology and solutions in one or more of the core domains: Endpoint protection; Incident Response; Malware Analysis; Application and Data security; Infrastructure and Endpoint; and Security Intelligence / SIE
• MExperience in one or more security domain, proven track record of implementing and operating information security systems, and working in projects related to the core domains applicable to information security architectur
• eBachelor's Degree in Engineering or Computer Science a plu