Information Security Engineer

Engineering a world of possibilities

The Security Engineer is a member of the Information Security team within the Information Technology department at Mines. They are responsible for the design, review, implementation, and maintenance of security controls and configurations for Mines suite of information technology. The position is also responsible for the administration of information security tooling and will perform a critical role in the investigations into security events.

This work is done in a hybid environment with some in-office presence. For more on the department, please visit: https://it.mines.edu/.

PRIMARY RESPONSIBILITIES:

Administration  

• Server: Partners with Mines infrastructure and applications teams to evaluate, implement, and maintain security practices and controls for Windows and Linux servers, ensuring that the systems are safeguarded against any potential threats. Leverages security benchmarking documentation and accompanying group policy and other techniques to ensure systems are configured to industry best practice. Provides evaluation and guidance regarding security best practice as it pertains to deployments, projects, and configurations.  

•  Application: Partners with Information Security team members to perform primary administrative duties for applications and other tooling directly owned and maintained by the Mines Information Security team. Collaborates with application owners for both locally and cloud hosted applications and platforms to ensure best practice configurations are implemented. Performs assessment of configurations against provider documentation and additional sources to optimize application and platform security. Works to ensure available security functions and tooling are leveraged in a manner which optimizes for security while providing consideration for user efficiencies, commensurate with Mines risk appetite.  

• Network: Partners with the Mines network team to evaluate, design, and validate the implementation of appropriate network security controls, to include appropriate authentication, authorization, and accounting, and segmentation. Performs change and impact evaluation of firewall policies, access control lists, and other restrictions. Works on the development, deployment, and continuous improvement of technologies such as network access control (NAC), and strategies such as Zero Trust (ZT).   

• Access Control: Partners with Identity and Access Management team to refine and implement user access control strategies that align with industry best practice and principle of least privilege (PoLP) methodologies. Collaborates on configuration assessments of directory services. Advises on the design and configuration of role-based access control (RBAC) and other access strategies commensurate with systems in scope. Participates in the design, configuration, and optimization of multi-factor authentication and other authentication technologies.  

• Client Device: Partners with Mines client device team to evaluate, implement, and maintain security protocols on Windows, Mac, and Linux client devices, ensuring that the systems are safeguarded against any potential threats. Leverages security benchmarking documentation and accompanying group policy and other techniques to ensure systems are configured to industry best practice. Provides guidance on centralized device management strategy leveraging mobile device management platforms.  

• Vulnerability Management: Performs configuration and maintenance of Mines vulnerability management platform. Collaborates with peers to ensure that Mines vulnerability management platform is properly configured to produce accurate and actionable outputs. The security engineer will partner with both internal and external teams to implement and validate mitigating actions as identified by Mines vulnerability management platform.   

• Monitoring: Regularly monitor logs and alerts for any suspicious activities. Appropriately communicates observed events to requisite Mines Information Security and other IT team members commensurate with scope of event. Ensures immediate action is taken in response to identified events in an effort to mitigate risks to systems, users, and data within scope of events.  

• Documentation: Evaluates and updates documentation for adoption, including as built and proposed configurations, on an ongoing basis to assess and maintain currency regarding information security controls. 

 

Controls Evaluation

• Audit: With guidance from leadership and collaboration with internal and external peers, acts as a point of contact for information security configuration components of voluntary and mandatory audit efforts, to include assessment, evidence artifact collection, reports and findings evaluation, an