Security Engineer for ITS Security - LA METRO

Cornerstone Concilium, Inc.; Los Angeles (CA); Hybrid; USD 156,000 - 238,000; Full time

Job summary

LA Metro seeks a highly experienced Security Engineer for ITS Security to bolster cybersecurity posture through governance, risk management, and security operations. The role involves working on Windows and Linux security, IAM controls, and modern security architectures within a transportation context.

Responsibilities include enhancing incident response, disaster recovery planning, and compliance with PCI DSS, ISO, NIST, GDPR, and related standards, with hybrid on-site/off-site scheduling.

Qualifications

• Bachelor's degree in IT or related field required.
• Minimum ten (10) years of cybersecurity experience, primarily in technical and SOC functions.
• Expertise in User Behavior Analytics, cybersecurity AI tools, SIEM, and next-gen firewalls.

Responsibilities

• Support cybersecurity staff augmentation for Metro's Information Security Department.
• Enhance security strategy, governance, risk assessments, and security operations.
• Review and create security procedures and requirements.
• Coordinate projects and manage cross-functional security initiatives.

Skills

CISSP

SOC operations

SIEM

Endpoint security

Threat analytics

Regulatory compliance

Project management

Windows security

Linux security

Education

Bachelor's Degree

Tools

Azure Security Tools

Zero Trust Architecture

Threat Analytics Platforms

Job description

Security Engineer for ITS Security - LA METRO - (251)

Share this job as a link in your status update to LinkedIn.

Job Title

Security Engineer for ITS Security - LA METRO

Location

Category

Information Technology

Job Type

Full-time

Experienced (Non-Manager)

Education

Bachelor's Degree

Salary Grade

$75.00 - $114.42 ( $156,000 to $237,993 YR )

Travel

Security Clearance Required

None

Job Description

Project Description:

This project entails providing cybersecurity staff augmentation services to Metro's Information Security Department for two years. The assigned resource will support various core functions within the department, focusing on enhancing security strategy, governance, risk assessments, and security operations. Flexibility in work schedules and locations is required. The project aims to bolster Metro's cybersecurity posture and adherence to industry best practices in the transportation sector.

• Proficiency in Windows and Linux operating systems and their security aspects.
• Expertise in a wide range of security products, including modern solutions like cloud security, Zero Trust architectures, advanced threat protection, and AI-Driven security analytics.
• Deep understanding of Incident Response, Disaster Recovery, Business Continuity, and Breach Management.
• Knowledge of information systems engineering, secure software development, networks security, and security operations.
• Familiarity with security standards and framework suck as PCI DSS, ISO Standards, ITIL, NIST Cybersecurity Framework, CCPA, CPRA, and GDPR.
• Ability to review and create security procedures and requirements.
• In-depth knowledge of industry frameworks like ISO 27000, NIST 800-53, ITIL Foundation, and NIST Cybersecurity.
• Strong grasp of regulatory compliance requirements, including PCI DSS, HIPAA, GDPR, etc.
• Comprehensive knowledge of security risk and countermeasures for Windows and Linux platforms.
• Project Management skills and coordination capabilities.
• Experience in Public Transportation or Transit Industries preferred.

Skills & Qualifications:

• Required CISSP
• Preferred Certifications: Microsoft Certification Azure Solutions Architect Expert, SANS GIAC, CEH-CCNA.
• Minimum ten (10) years of experience in cybersecurity, primarily focused on technical and Security Operations Center (SOC) functions.
• Expertise in User Behavior Analytics, Cybersecurity AI tools, SIEM, Endpoint Security, NextGen Firewalls, etc.
• Advanced knowledge of security applications, infrastructure, technologies, and methodologies.
• Up-to-Date understanding of the latest security advisories, alerts, and vulnerabilities relevant to Metro.
• Initiative and independent judgement within established guidelines.
• Ability to prioritize work processes and project effectively.
• Timely response to cybersecurity issues and incidents.

Hybrid position: 30% home & 70% On Site

Salary Range: $156,000 to $238,000 /Year

Skills and Requirements

Specialized Skills

We are equal opportunity/affirmative action employers, committed to diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status, or any other protected characteristic under state or local law.