Security Engineer II

MWIDM; Montgomery (AL); On-site; USD 90,000 - 130,000; Full time

Job summary

MWIDM is seeking a Security Engineer to design, implement, and maintain advanced security technologies and incident response capabilities in our Alabama operations. You will develop run books, automate security processes, and perform risk analyses across systems and networks.

The role requires collaboration with clients and colleagues to enforce robust security postures. The ideal candidate has 5+ years of IT security experience, strong communication skills, and hands-on expertise with

Qualifications

• Bachelor's Degree in Computer Science, Information Systems or related field, or equivalent experience.
• Minimum of 5 years IT relevant experience or equivalent combination of experience plus at least 3 years of experience performing Security Engineering / Planning Operations.
• Experience in medium to complex computing environments, with advanced knowledge in security technologies and services Hands-on experience with at least two or more of the following Enterprise Security Technologies:
• Network Intrusion Prevention / Detection
• Virtual Private Networks; SSL, IPSec and Site-to-Site
• Enterprise Class Stateful Inspection Firewalls
• Network Access Controls in context to Identity management
• Windows Server OS & Desktop OS
• Network Packet Inspection
• Directory Services including LDAP, AD and Secure Authentication Technologies
• Experience in implementing Information Security technologies and/or processes required.
• Experience in defining Information Security strategies and frameworks
• Experience integrating security technologies into corporate operations frameworks.
• Ability to communicate effectively with client staff at all levels, from technical to executive
• Multi-task oriented in a team environment
• Demonstrated ability to pay close attention to detail
• Knowledge of Information Security risk assessment methodologies and standards Experience developing technical documentation, including reports, proposals, statements of work, and whitepapers
• Ability to work independently, undertaking and completing project tasks on schedule with minimal supervision

Responsibilities

• Design, build, test and deploy new security technologies, which include the development of the operational manual and run books.
• Provides technical security operations engineering services to support and update existing security systems and works to automate processes related to security implementations, monitoring, and enforcement.
• Investigates, recommends, evaluates, deploys and integrates operational security tools and techniques to improve our ability to protect corporate assets and infrastructure.
• Participate in technical risk assessments and security exposure analyses of systems, networks and business applications.
• Analyzes network security elements and overall network security architectural designs to ensure secure and optimal system and network performance and cost effectiveness.
• Oversees the installation, configuration and supportive processes of security technologies.
• Participate in or lead the Incident Response activities including MES
• Interacts with internal and external clients on security operations requirements, identifies security process and develops strategies/solutions to security issues
• Keeps fully abreast of trends and changing technologies as they relate to IT and Network Engineering and Information Security fields
• Lead or assist in periodic or ad-hoc security reports that provide relevant situational awareness to our senior stakeholders

Skills

Security Engineering

Incident Response

Risk Assessment

Security Architecture

Client Communication

Education

Bachelor's Degree in CS/IS or related

Tools

IPS/IDS

VPNs/SSL/IPSec

Firewalls

LDAP/AD

Security Reporting Tools

Job description

• Design, build, test and deploy new security technologies, which include the development of the operational manual and run books
• Provides technical security operations engineering services to support and update existing security systems and works to automate processes related to security implementations, monitoring, and enforcement
• Investigates, recommends, evaluates, deploys and integrates operational security tools and techniques to improve our ability to protect corporate assets and infrastructure
• Participate in technical risk assessments and security exposure analyses of systems, networks and business applications
• Analyzes network security elements and overall network security architectural designs to ensure secure and optimal system and network performance and cost effectiveness
• Oversees the installation, configuration and supportive processes of security technologies
• Participate in or lead the Incident Response activities including MES
• Interacts with internal and external clients on security operations requirements, identifies security process and develops strategies/solutions to security issues
• Keeps fully abreast of trends and changing technologies as they relate to IT and Network Engineering and Information Security fields
• Lead or assist in periodic or ad-hoc security reports that provide relevant situational awareness to our senior stakeholders

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

Security Engineering

• Design, build, test and deploy new security technologies, which include the development of the operational manual and run books
• Provides technical security operations engineering services to support and update existing security systems and works to automate processes related to security implementations, monitoring, and enforcement
• Investigates, recommends, evaluates, deploys and integrates operational security tools and techniques to improve our ability to protect corporate assets and infrastructure
• Participate in technical risk assessments and security exposure analyses of systems, networks and business applications
• Analyzes network security elements and overall network security architectural designs to ensure secure and optimal system and network performance and cost effectiveness
• Oversees the installation, configuration and supportive processes of security technologies
• Participate in or lead the Incident Response activities including MES
• Interacts with internal and external clients on security operations requirements, identifies security process and develops strategies/solutions to security issues
• Keeps fully abreast of trends and changing technologies as they relate to IT and Network Engineering and Information Security fields
• Lead or assist in periodic or ad-hoc security reports that provide relevant situational awareness to our senior stakeholders

Security Operations / Administration#

• Monitor and manage our networks and infrastructure environment for attacks, malicious software and possible intrusions, which includes the follow up of complete remediation of infected systems
• Required to be on-call (after hours) per the established rotational schedule
• Implement changes to Kia Georgia's OA/MES security technologies / infrastructure in accordance with standard and change control policies / procedures
• Evaluate, implement, tune and operate Security Solutions such as IPS, Vulnerability scanning tools, encryption capabilities, etc.
• Monitor and recommend improvements of security technologies and their various reports
• Monitor and recommend improvements of EPS production white-list solution
• Collaborate with IT Security Specialist to ensure security tools are functioning for production systems
• Risk Management / Security Audit/Assessment Support / Ad-hoc support
• Support security audit / assessment related activities and compliance reviews
• Performs other task, duties and projects as assigned
• Provide Ad-hoc support as required

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

Job Requirements

• Bachelor's Degree in Computer Science, Information Systems or related field, or equivalent experience
• Minimum of 5 years of IT relevant experience or equivalent combination of experience plus at least 3 years of experience performing Security Engineering / Planning Operations
• Experience in medium to complex computing environments, with advanced knowledge in security technologies and services Hands-on experience with at least two or more of the following Enterprise Security Technologies:
• Network Intrusion Prevention / Detection
• Virtual Private Networks; SSL, IPSec and Site-to-Site
• Enterprise Class Stateful Inspection Firewalls
• Network Access Controls in context to Identity management
• Windows Server OS & Desktop OS
• Network Packet Inspection
• Directory Services including LDAP, AD and Secure Authentication Technologies
• Experience in implementing Information Security technologies and/or processes required.
• Experience in defining Information Security strategies and frameworks
• Experience integrating security technologies into corporate operations frameworks.
• Ability to communicate effectively with client staff at all levels, from technical to executive
• Multi-task oriented in a team environment
• Demonstrated ability to pay close attention to detail
• Knowledge of Information Security risk assessment methodologies and standards Experience developing technical documentation, including reports, proposals, statements of work, and whitepapers
• Ability to work independently, undertaking and completing project tasks on schedule with minimal supervision

CERTIFICATIONS

CISSP, CISSP-ISSAP, SANS, or other professional certification applicable to security engineering are preferred.