Information Security Engineer

Information Security Engineer
The Information Security Engineer's focus is to develop and implement security solutions, which also includes current evaluation as well as keeping track of observance of the needed security guidelines all over the company computing environment. This role may help conduct network and software vulnerability assessments and testing by utilizing reverse engineering techniques. This job learns how to test the current state of the information security architecture and provides improvement recommendations by gathering key insights found from testing and analyzing the current systems and networks. This job also assists with evaluating system security configurations and performing root cause analysis to determine how to provide optimal IT security for the organization.

Key Responsibilities and Duties

• Providing operations and engineering support for critical security systems and services including servers, endpoint security, computer forensics, vulnerability/penetration assessment/mitigation, and security event management.
• Assists with executing vulnerability analysis and exploitation of applications, operating systems and networks.
• Works to identify intrusion or incident path or method through testing and evaluation procedures.
• Help design, develop and implement countermeasures, systems integration and tools specific to cyber and information operations.
• Learns how to resolve malware and intrusion issues within the system as they occur.
• Follows industry security updates, technologies and practices on a continual basis to improve overall security management.
• Helps serve as an internal information security consultant on the standards, complex issues and best practices for the organization.
• Contributes to the testing and analysis of complex software systems to determine both the functionality and intent of the systems.
• Assists with maintaining operational and configuration documentation and creates and maintains diagrams.
• Learns from and works with Cybersecurity Risk and Security Operation teams to enhance the overall security posture of the enterprise.

Minimum Qualifications

• 2 years of experience supporting cybersecurity initiatives
• Knowledge and understanding of threat detection

Preferred Qualifications

• 3 or more years of experience in cybersecurity for a mid-large sized organization
• Email authentication expertise (SPF, DKIM, DMARC)
• Previous experience with Secure Email Gateway administration
• BEC and phishing threat expertise
• Email incident response & forensics experience
• Industry certifications - Sec+, CISSP, or similar

Educational Requirements

• University (Degree) Preferred

Physical Requirements

• Physical Requirements: Sedentary Work

Career Level
6IC