Information Security Engineer 

Description:

The Information Security Engineer will engineer, implement and monitor a comprehensive set of security controls as a part of client's security strategy for the protection of client's computer systems, networks and data.

Duties/Responsibilities:

• Contribute to the identification and definition of system security requirements and advise on the design of security monitoring infrastructure for on-premise and cloud solutions.


• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.


• Configure and troubleshoot security infrastructure devices and ensure the proper operation of security processing routines.


• Help establish and maintain processes to monitor network traffic for anomalous activity.


• Apply INFOSEC best practices and principles to network protocols, architectures, equipment, services, standards and technology.


• Monitor client's network, devices and computer systems for accuracy, consistency and/or abuse.


• Develop security test plans based on system architecture, dataflow, and hardware/software profile information.


• Perform vulnerability assessments and application security evaluations utilizing recognized security assessment tools.


• Vet new software or hardware configurations for compliance with established security standards.


• Assist with the engagement and coordination of third party security assessments.


• Assist in the prompt investigation of security incidents and be prepared to isolate and remediate incidents pursuant to established procedures.


• Inspect suspicious files to determine potential threats.


• Perform malware analysis to understand origin and risk of potentially malicious code.

Requirements:

• Two or more years of experience working in an Information Technology security capacity. 


• A college degree (i.e. B.A. Information Systems or B.S. Computer Science) is preferred.


• One or more information security certifications such as GCIH, GCIA, GMON, CISSP or others are preferred.