Description

Responsibilities:

  • Design, integrate, and implement enterprise-wide information systems security infrastructure.
  • Assess potential vulnerabilities and determine appropriate security measures.
  • Develop and maintain security policies, procedures, and best practices.
  • Educate teams and new employees on cybersecurity awareness and secure practices.
  • Monitor and recommend changes to security posture and systems to prevent breaches.
  • Research emerging security threats and methods to proactively eliminate risk.
  • Ensure compliance with privacy laws, regulatory standards, and internal policies.
  • Provide expert-level guidance and mentorship to junior engineers.
  • Serve as SME across security operations, incident response, and risk management.

Required Skills & Technologies:

  • Core Competencies:
    • Network Security
    • Security Controls (firewalls, IDS/IPS, authentication)
    • TCP/IP Protocols
    • Security Systems Monitoring & Administration
  • Tools/Technologies Experience (at least several of the following):
    • Firewalls/Security Appliances: Check Point, Juniper, Palo Alto, Fortinet
    • Monitoring & SIEM: Splunk, LogRhythm, McAfee, Rapid7, Firemon
    • Endpoint & Malware Protection: Trend Micro, Websense, Sophos, Kaspersky, MalwareBytes
    • Access & Data Control: CyberArk, Varonis, BeyondTrust
    • Cloud/Virtualization Security: Zscaler, VMware, Forescout, Axway
    • Network & Traffic Management: F5, Gigamon, Xirrus, Aruba, Arbor Networks
    • Automation & DevOps Tools: Jenkins, Puppet, Chef
    • Scripting & Development: Python, Java, JavaScript
  • Other Skills:
    • Advanced troubleshooting of network/system issues
    • Strong written and verbal communication skills
    • Report writing using MS Word, PowerPoint, Excel
    • Experience with geographically dispersed multi-datacenter environments
    • Familiarity with DevOps, Agile methodologies, and Active Directory

Certifications (Preferred but not mandatory):

  • CISSP (Certified Information Systems Security Professional)
  • CISA (Certified Information Systems Auditor)
  • Security+
  • SANS/GIAC Certified Firewall Analyst (GCFW)
  • SANS/GIAC Enterprise Defender (GCED)
  • GSEC (GIAC Security Essentials Certification)

Education

Any Gradute