Sr. SecOps Security Engineer - Bensalem, PA

Pffcu; Bensalem Township (Bucks County); Sur place; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Excellent medical, dental, vision

401K – 6% after 1 year

Paid time off

Résumé du poste

PFFCU is seeking a Sr. SecOps Security Engineer in Bensalem, PA. You will design, implement, and maintain robust security architectures to protect the network infrastructure from cyber threats, working with IT and compliance teams to meet financial regulatory requirements.

You will leverage SPLUNK SIEM, firewalls, DLP, IAM, and endpoint protections to detect, prevent, and respond to threats while contributing to security posture reports and risk assessments.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 5+ years of hands-on information security engineering and administration experience.
• Demonstrated knowledge of perimeter security devices and configuration.

Responsabilités

• Design, implement, and manage SPLUNK SIEM solutions for centralized security monitoring, advanced threat detection, and incident response.
• Manage and monitor intrusion detection and prevention systems; respond to suspicious activity.
• Deploy and maintain network-based DLP solutions and develop data privacy policies.
• Conduct regular vulnerability assessments with Nessus and drive remediation.
• Deploy zero-day threat protection and develop response strategies.
• Manage endpoint protection technologies to guard against malware.
• Implement IAM solutions like Okta and RSA.
• Architect secure network solutions including FW, NGFW, and web content filtering.
• Maintain security architecture documentation and regular posture reports.
• Collaborate with IT and compliance teams on security best practices.

Outils

SPLUNK

Firewalls

Web Filtering

Zero Trust

Intrusion Detection

DLP

Vulnerability Scans

IAM

Okta

RSA

ForcePoint

Nessus

Cisco CSW

Cisco ISE

XDR

MFA

StealthWatch

Description du poste

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Sr. SecOps Security Engineer - Bensalem, PA

Information Technology Technical Bensalem, PA, US

2 days ago Requisition ID: 2239

Competitive Base Salary - Experience Required

****EXCELLENT MEDICAL, DENTAL, VISION BENEFITS: 75% to 90% of premiums covered by PFFCU*****

****401K – PFFCU contributes automatic 6% regardless of employee contribution after 1 year*****

********Great benefits, paid time off, and more! Become a part of the team today!******

We are seeking a highly skilled and experienced Senior Security Engineer to join our dynamic Information Security team. Reporting to the Manager SecOps, the ideal candidate will possess extensive knowledge and hands-on experience with various network security technologies, including SPLUNK, firewalls, web filtering, zero trust network segmentation, intrusion detection/protection systems, data loss prevention, vulnerability scanners, zero-day threat protection, endpoint technologies, Security Information Event Management, identity and access management (IAM) solutions.

As a Sr Security Engineer you will be responsible for designing, implementing, and maintaining robust security architectures to protect our organization's network infrastructure from cyber threats. You will work closely with all Information Systems department staff to assess and reduce information security risk and ensure compliance with established financial institution regulations.

JOB RESPONSIBILITIES:

• Design, implement, and manage SPLUNK SIEM solutions for centralized security monitoring, advanced threat detection, and comprehensive incident response, leveraging extensive experience to optimize and enhance security operation
• Manage and monitor intrusion detection and prevention systems, responding to suspicious activities
• Deploy and maintain network-based DLP solutions and develop policies to ensure data privacy
• Conduct regular vulnerability assessments with tools like Nessus and work on remediation
• Deploy zero-day threat protection and develop response strategies
• Manage endpoint protection technologies to guard against malware
• Implement identity and access management solutions like Okta and RSA
• Architect and configure secure network solutions, including FW, NGFW, Web Content Filtering
• Maintain security architecture documentation and generate regular security posture reports
• Collaborate with IT and compliance teams, providing guidance on security best practices

TECHNICAL SKILLS:

In depth working knowledge of a variety of network perimeter security technologies including:

• Web Content Filtering (ForcePoint)
• DLP - Network Based Data Loss Prevention
• Vulnerability Scanners
• IAM solutions
• Firewalls & NGFW
• NetFlow Visibility

MINIMUM REQUIREMENTS:

• Bachelor’s degree in Computer Science, Information Technology, or a related field. Advanced degree or certifications are the preferred
• 5 plus years of hands-on information security engineering and administration experience
• Demonstrated technical knowledge of perimeter security devices and configuration
• Proficiency in virtualized environments, including substantial experience with VMware and other virtualization technologies
• Ability to assess problems and situations possesses analytic ability and good judgment
• Demonstrate effective business communication and technical writing skills
• In-depth knowledge of financial institution regulations, including NCUA (National Credit Union Administration), GLBA (Gramm-Leach-Bliley Act), and PCI DSS (Payment Card Industry Data Security Standard)

SKILLS/KNOWLEDGE/ABILITIES REQUIRED:

• In depth working knowledge of a variety of network perimeter security technologies including:
• Web Filter (ForcePoint)
• Security Information and Event Management (SIEM) (SPLUNK)
• DLP - Network Based Data Loss Prevention
• Vulnerability Scanners (Nessus)
• Email security technologies
• Cisco Secure Workload (CSW)
• Cisco Identity Services Engine (ISE)
• XDR solutions (Cisco AMP, Trellix, MS Defender)
• FireEye (NX and CMS)
• MFA (Okta and RSA)
• StealthWatch
• Working knowledge of Security Risk Assessment Methodology, Vulnerability Analysis and strong knowledge of SIEM technology (SPLUNK)
• Monitor and maintain network security appliances to ensure the integrity of all systems from both internal and external entities.
• Accurately document current and future InfoSec systems configuration and changes following PFFCU’s change control guidelines.
• Tier 2 problem escalation contact including rotating afterhours support
• Develop a working knowledge of the business side of PFFCU and be able to effectively interface with other IT teams using the technology.
• Strong project skills required, specifically the ability to maintain focus and complete projects with multi-month timeframes
• Worked with third party service provider
• Ability to handle multiple projects at the same time
• Ability to think logically and visualize abstract concepts

Ability to clearly communicate technical information to individuals at all levels of the organization and with vendors

• Ability to prioritize multiple tasks
• Ability to work varying hours, sometimes includes evening and weekend work
• Ability to participate in an on-call rotation
• Core hours are Monday-Friday 8:00 AM – 4:00 PM