Security Engineer

krg technology inc; New York (NY); On-site; USD 90,000 - 120,000; Full time

Job summary

A technology solutions company is seeking a Security Engineer based in New York City, NY. The successful candidate will be responsible for identifying security risks and implementing preventative actions. Key responsibilities include handling incident responses, performing malware analysis, and supporting various security tools. Candidates should have hands-on experience with multiple security solutions and relevant certifications such as CISSP, CEH, or CCSP. This contract position is ideal for someone with strong analytical and problem-solving skills.

Qualifications

• Hands-on experience with at least two types of security solutions.
• Knowledge of industry best practice standards like ISO 27000 series.
• Familiarity with SOX regulations.

Responsibilities

• Identify and mitigate information security risks.
• Implement security tools and handle incident responses.
• Perform malware analysis and forensic analysis.

Skills

Information Security Risk Management

Incident Response

Malware Analysis

Analytical Skills

Problem Solving

Education

Technical or information security certifications (CISSP, CEH, CCSP)

Tools

Qualys

Nessus

Rapid7

SIEM solutions

SEP

EPO

SCEP

MimeCast

Postini

Job description

Job Description

We are looking for a Security Engineer - New York City, NY.

Position: Security Engineer

Location: New York City, NY.

Duration: Contract

Responsibilities

• Identify information security risks, implement actions to prevent or reduce the loss of organizational assets.
• Support security tools such as Email Security, Antivirus, Network IPS, Web Content Filtering, etc.
• Handle Security Incident Response, respond to security alerts, triage events and handle remediation of security incidents.
• Perform Malware Analysis, Validate Firewall access requests, and Zero Day Patch/Vulnerability management.
• Perform system forensic analysis to identify, contain and remediate sophisticated threats.
• Prepare and review activity reports and metrics as requested by management.
• Knowledge and awareness of industry best practice standards and security regulations including the ISO 27000 series and SOX regulations.
• Perform other related duties as assigned.
• Design and Execute IT security Implementation Projects / POC’s.
• Manage and collaborate with IT Management, Legal, Third party Agencies and Law enforcement agencies to address identified Security incidents.
• Strong analytical and problem solving skills.
• Candidate must possess hands on experience in any two of the following security solution types:
• Infrastructure Vulnerability Management (Qualys, Nessus, Rapid7)
• Security Information Event Management solutions (SIEM)
• Enterprise Virus Management Solutions (SEP, EPO, SCEP)
• Network/Cloud Based Email security solutions (MimeCast, Postini)
• OS (Unix, Linux, Windows, Mac )
• Technical or information security certifications are also strong plus. CISSP, CEH or CCSP certifications are major plus.

Additional Information

All your information will be kept confidential according to EEO guidelines.