Sr Prin Security Engineer

Consumers Energy is Michigan’s largest energy provider, providing natural gas and/or electricity to 6.8 million of the state’s 10 million residents in all 68 Lower Peninsula counties. Consumers Energy knows job number one is to keep the lights on for customers. We are committed to delivering reliable, clean, and affordable energy to our customers 24/7.  

 

Location: This is a hybrid (virtual/onsite) position with required onsite days on Monday, Tuesday and Thursday assigned to the One Energy Plaza headquarters in Jackson, MI.  The selected candidate must be within a commutable distance or willing to relocate (relocation package is available for those that qualify).

General Summary of Job Responsibilities

The Senior Principal Security Engineer is responsible for making decisions and providing technical leadership on projects to expand business capabilities while increasing the security posture of Consumers Energy. Furthermore, the Senior Principal Security Engineer will consult on the design, development, integration, and analysis of platforms, while working with systems, hardware, software, and variety of technical and non-technical teams to meet the business objectives in a secure manner. The Senior Principal Security Engineer is a recognized as an expert within the organization, both within and beyond their own function. This position will also provide direction on roadmaps and architecture standards.

Essential Duties and Responsibilities

• Works with Business partners and provides the Interpretation of the security standards. This role will also assist in working through various requirements questionnaire with business partners to ensure programs/applications are properly secured by meeting the appropriate standards (Encryption, Authentication, etc.) The Principal Engineer will be responsible for Approval of designs along with communicating any Security Risks with Leadership.
• Build a strong relationship with internal and external teams by discussing emergent/new technology roll outs, participating in technical review meetings that include cross-functional teams both highly technical and non-technical personnel.
• Selects and executes the appropriate standard practices, procedures, and workflow for team activities, such as daily operating reviews, technical Implementations, standards development, CE Way activities to ensure any gaps noted in processes are shared with the team for remediation. This role is also responsible for approving changes for any process improvements within Engineering.
• Engage, lead, and/or mentor other Security employees, especially associate engineers and career engineers.
• Other duties as assigned or may be necessary
• Researches, designs, and approves new security technologies and architectures
• Participates in, and at times, responsible for, strategic decision-making with respect to security controls. Can effectively weight opposing advantages while balancing organization risk appetite.
• Develops standards and executes practices, procedures and workflow for team metrics and activities. Provides broad architectures decisions to business partners and security engineers.
• Conducts Security reviews and approvals to ensure designs are meeting the applicable security standards along with addressing regulatory requirements.

Knowledge/Skills/Abilities

• Ability to learn and adapt new concepts to build a professional body of knowledge
• Excellent communication skills both written and verbal
• Awareness of security industry concepts, best practices, and trends
• Working knowledge of computer network concepts
• Knowledge of Information Technology (IT) or Network systems and designs
• High degree of integrity and confidentiality, as well as ability to adhere to company policies and best practices.

Education/Experience

• Bachelor's degree in Cyber Security, Computer Science, or Information Technology and 10+ years of experience in cyber security, computer networks and/or system engineering, or closely related discipline is required. 3 yrs. of hands-on experience working with the following technologies: Firewalls, Proxy's, Network Architecture Design, Privileged Account Management, Endpoint Security Platforms, Cloud Technology AWS/Azure. Experience developing standard work to efficiently and effectively manage technology resources, for example firewalls, IDS, Active Directory, or vulnerability management.  [OR]

 

• Associate's degree in Cyber Security, Computer Science, or Information Technology and 12+ years of experience in cyber security, computer networks and/or system engineering, or closely related discipline is required. 3 yrs. of hands-on experience working with the following technologies: Firewalls, Proxy's, Network Archi