Responsibilities:
- Design, integrate, and implement enterprise-wide information systems security infrastructure.
- Assess potential vulnerabilities and determine appropriate security measures.
- Develop and maintain security policies, procedures, and best practices.
- Educate teams and new employees on cybersecurity awareness and secure practices.
- Monitor and recommend changes to security posture and systems to prevent breaches.
- Research emerging security threats and methods to proactively eliminate risk.
- Ensure compliance with privacy laws, regulatory standards, and internal policies.
- Provide expert-level guidance and mentorship to junior engineers.
- Serve as SME across security operations, incident response, and risk management.
Required Skills & Technologies:
- Core Competencies:
- Network Security
- Security Controls (firewalls, IDS/IPS, authentication)
- TCP/IP Protocols
- Security Systems Monitoring & Administration
- Tools/Technologies Experience (at least several of the following):
- Firewalls/Security Appliances: Check Point, Juniper, Palo Alto, Fortinet
- Monitoring & SIEM: Splunk, LogRhythm, McAfee, Rapid7, Firemon
- Endpoint & Malware Protection: Trend Micro, Websense, Sophos, Kaspersky, MalwareBytes
- Access & Data Control: CyberArk, Varonis, BeyondTrust
- Cloud/Virtualization Security: Zscaler, VMware, Forescout, Axway
- Network & Traffic Management: F5, Gigamon, Xirrus, Aruba, Arbor Networks
- Automation & DevOps Tools: Jenkins, Puppet, Chef
- Scripting & Development: Python, Java, JavaScript
- Other Skills:
- Advanced troubleshooting of network/system issues
- Strong written and verbal communication skills
- Report writing using MS Word, PowerPoint, Excel
- Experience with geographically dispersed multi-datacenter environments
- Familiarity with DevOps, Agile methodologies, and Active Directory
Certifications (Preferred but not mandatory):
- CISSP (Certified Information Systems Security Professional)
- CISA (Certified Information Systems Auditor)
- Security+
- SANS/GIAC Certified Firewall Analyst (GCFW)
- SANS/GIAC Enterprise Defender (GCED)
- GSEC (GIAC Security Essentials Certification)