Sr. Cyber Security Engineer | VCORE Systems

Job Overview

The Senior Cyber Security Engineer provides technical expertise and direction in developing and supporting business applications to ensure they are deployed securely. Individuals in this role are responsible for aligning industry security best practices and technology solutions with business strategies. Based on knowledge of assigned customers¿ businesses, Senior Cyber Security Engineers are responsible for proactively identifying risks and remedial actions that apply to technologies for business processes. In addition to providing technical expertise, Senior Cyber Security Engineers consistently demonstrate strong leadership, initiative and communication skills. They have a proven track record of being actively sought out by other team members for their technical advice.

Roles And Responsibilities

• Participates in the development and implementation of computing center information security policies and procedures; develops security guidelines and safe practices for company-wide computing and networking systems.
• Leads vulnerability assessment, risk management, host and network intrusion detection, anti-virus technologies, firewalls, SIEM host forensics, and malware analysis.
• Acts in partnership with assigned customers’ businesses to proactively identify risks and remedial actions that apply to technologies for business processes.
• Informs and advises customers on information system technologies, functionality, costs, benefits and implementation requirements.
• Anticipates problems and proactively manage them to resolution.
• Coordinates the handling and resolution of incidents of security breach, to include system intrusions and abuse; acts as primary point of contact.
• Develops, facilitates, and presents information security awareness and security training throughout the company.
• Reviews, updates, and enforces data security practices within the campus and restaurant systems environments; tests for exposures to ensure adherence to guidelines and procedures, and works with platform experts to implement remedial measures as appropriate.
• Coordinates and participates in special projects concerning information security, including testing and implementation of security software enhancements.
• Acts as subject matter expert to guide more junior team members through technical situations.
• Implements and manages Enterprise PKI infrastructure.
• Conducts manual and automated security assessments of web applications.

Required Technical Skills

• Minimum 7 years in the information security field.
• Experience in implementing and supporting information security policies and procedures and security practices for company-wide computing and networking systems.
• Proven ability handling and resolving incidents of security breach, to include system intrusions and abuse; acts as primary point of contact.
• Demonstrated broad knowledge of all facets of information security operations, including: vulnerability assessment, risk management, host and network intrusion detection, anti-virus technologies, firewalls, SIEM host forensics, and malware analysis.
• Solid understanding of network, workstation, and server security configuration.
• Expertise in best commercial practices for information security and a thorough knowledge and understanding of the Cyber Security marketplace.
• Demonstrated experience in the following areas:
• Supporting information security design concepts, including testing and implementation of security software enhancements.
• Implementing and maintaining single sign on applications.
• Executing and managing Enterprise PKI infrastructure.
• Implementing and administering encryption solutions.
• Web Application Firewalls, Proxies, Anti-Virus Technology and URL Content Filtering Technology.
• Knowledge of regulatory compliance regulations (PCI, SOX, PII).
• Must be able to effectively interact with other teams across the organization.
• Ability to manage multiple tasks along a parallel process.

Required Education

• Bachelor’s degree in Computer Science, Information Technology, or a relevant field, or equivalent experience.

Other Key Qualifications

• Strong interpersonal and consultative skills.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Excellent written & verbal communication skills.
• Proven technical documentation skills.
• Excellent presentation skills.
• Experience working in a team-oriented, collaborative environment.
• Demonstrated ability to lead and support technical teams.
• Strong work ethic.
• Demonstrated initiative and ownership.
• Proven ability to effectively interact professionally with a diverse group of people at all levels of the organization.

Preferred Skills And Experiences

• Minimum of two current technical certifications (e.g., CISSP, CEH, GIAC, GSEC).

– Expert level experience in the technical design and implementation of perimeter and Cloud security technologies.

– Recent experience with two or more of the following technologies (f5, WAF, Palo IPS, PKI, Azure Security Center, Firewall, Veracode).

– 5 years of network engineering experience and strong understanding of network infrastructure technologies (TCP/IP, Routing, LAN, WAN, Etc.).

– Experience serving as the technical lead on cross-functional projects.

– Hands on recent experience with web proxy/gateways (f5, TMG, etc.).

• Experience in the following applications:

– IPS/IDS (Palo Alto, SourceFire

• Web Proxy Filter’s (Zscaler, F5, BlueCoat)
• DLP (Websense, McAfee)
• Spam (email) filtering (Proofpoint, Ironport)
• Tenable Security Center (Nessus)
• VeraCode
• HP WebInspect
• EnCase