Senior Solutions Engineer IT Solutions

PRA Group (Nasdaq: PRAA); Virginia (MN); Hybrid; USD 120,000 - 170,000; Full time

Job summary

PRA Group is seeking an experienced security design professional to safeguard information assets across platforms. You will design and monitor access controls, evaluate new technologies, and drive risk-based safeguards.

Collaborating with product vendors and multiple IT teams, you will lead incident response, threat hunting, and cloud security efforts in a hybrid role with three days onsite weekly. Visa sponsorship is not available.

Qualifications

• Bachelor’s Degree in related field or equivalent work experience; Master’s preferred.
• 7-9 years’ experience in security design, configuration, troubleshooting and risk assessment.
• Required Certifications: CISSP, SSCP; desirable: CCNA-Security, SANS/GIAC, PCNSE.
• Strong knowledge of firewalls, IDS/IPS, web filtering and network infrastructure.
• Proven ability to develop threat signatures and respond to emerging threats.

Responsibilities

• Design, implement and maintain network security guidelines for the corporation.
• Develop penetration testing procedures and incident response plans.
• Maintain alerting and log management systems.
• Monitor compliance with information security policies and procedures.
• Coordinate security access for applications and cloud solutions.
• Produce monthly security incident and status reports.
• Support DevSecOps integration and secure code practices.
• Collaborate with vendors and IT teams across departments.

Skills

Security design

Threat detection

incident response

Network security

Communication

Team collaboration

Education

Bachelor's Degree in related field

Master's degree preferred

Tools

CISSP

SSCP

CCNA-Security

SANS/GIAC

PCNSE

Job description

Designs and monitors internal and external access controls, security safeguards and associated processes to protect the confidentiality, integrity and availability of PRAA information systems assets. Participates in evaluating new technologies and applications, assessing vulnerabilities and risks, detecting and responding to incidents, and recommending appropriate safeguards. Assists in the evaluation, selection, implementation and administration of security software across platforms.

Interact closely with product vendors and service providers, personnel from various IT departments — including Service Desk, Data Center, and Server Admin teams — as well as with business departments.

This is a hybrid position working onsite in the office 3 days per week.

Note: We are not able to provide visa sponsorship now or in the future.

Professional Experience/Qualifications:

• Bachelor’s Degree in related field or equivalent work experience. Master’s degree preferred.
• 7-9 years’ of professional experience in security design, configuration, troubleshooting techniques, and the use of diagnostic software and tools are required or equivalent combination of education and experience
• Required Certifications: CISSP, SSCP
• Desirable certifications include: CCNA-Security, SANS/GIAC, PCNSE,
• Detailed knowledge in general security principles and practices.
• Proven ability to develop custom threat signatures in response to zero-day and emerging security threats.
• Detailed knowledge with security-related systems and applications, firewalls, packet analysis tools, intrusion detection/prevention, and web content filtering.
• Detailed knowledge of network infrastructure, including routers, switches, firewalls.
• Detailed digital Forensics skills and experience.
• Detailed knowledge on IDS / IPS solutions and integrating into existing network configurations.
• Strong analytical and problem-solving skills to enable effective security incident and problem resolution.
• Proven ability to work under stress in emergencies, with the flexibility to handle multiple high-pressure situations simultaneously.
• Ability to work well under minimal supervision.
• Strong team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles, including vendors and IT-business personnel.
• Strong written and verbal communication skills.
• Strong customer/client focus, with the ability to manage expectations appropriately, provide a superior customer/client experience and build long-term relationships.

Key Responsibilities:

• Design, implement and maintain network security guidelines and a security infrastructure for the corporation.
• Develop and implement penetration testing and procedures.
• Develop, implement and maintain an alerting, archival and event log management system.
• Monitor compliance with information security policies and procedures. Monitor network, devices and servers for security violations
• Conduct data security forensic analysis
• Assist departmental technical staff in identifying and implementing appropriate security safeguards
• Coordinate and monitor security access for all applications
• Prepare monthly reports on security incidents and security status
• Architect and design appropriate security safeguards for Cloud solutions
• Implement and assist with security in a DevSecOps environment
• Develop and implement source code security analysis
• Serve as a security expert in applications development and database design efforts
• Research, design, and advocate new technologies, architectures, and security products that will support security requirements
• Contribute to maintenance and development of application and database security strategy and architecture
• Analyze business impact and exposure based on emerging security threats, vulnerabilities, and risks.
• Ensure adequate security solutions are in place to mitigate identified risks sufficiently to meet business objectives and regulatory requirements