Information / Cyber Security, Professional 3

Position Summary:

The Firewall/Network Security Engineer primary responsibilities include recommending and overseeing firewall (perimeter) and network security security, setting up alerts and responding to events related to network and firewalls. In addition, the role will be a part of the Security Operations team responsible for investigating and responding to cyber security related events, ensuring appropriate security log sources are being captured, tuning security alerts, retrieving and analyzing data, network traces and other evidence from computers, networks, and data storage devices. In addition, this role will be part of an on call rotation managing, assigning and tracking to closure Security Operations Center (SOC) tickets and investigations. This work requires the engineer to be extremely detailed in their work and thorough in how the work is documented, tracked, and closed.



Organizational Relationships:



This role works with the Information Technology team and the business to support secure information process and technology.

Job Responsibilities:

• Act as Lead Firewall/Network Security Engineer, recommending security best practices, implementing, and overseeing network and perimeter security.
• Reviewing and approving firewall rule requests.
• Reviewing and cleaning up existing rules and policies.
• Identifying perimeter and network security enhancements and implementing.
• Identifying and recommending logging, alerting and event monitoring enhancements.
• Participate as part of the Information Security Operations team.  Some after-hours and weekend work required along with participation in an on-call rotation.
• Support security operations activities responding to alerts, participating in on call schedule, owning and supporting security tools.
• Analyze logs, identify, recommend, and improve current logging requirements.
• Make recommendations to management on enhancements to existing and new security hardware, software or related tools.  Assist in evaluating, planning, configuration, and implementation of new/existing security applications/tools.
• Perform risk analysis for corporate functional and technical areas relevant to data security.
• Configure, implement, monitor, and support security software/systems that will help ensure compliance with regulatory, industry, and corporate policies and procedures. This includes but is not limited to Intrusion Detection System/Intrusion Prevention System (IDS/IPS) (Host/Network/Wireless), secure file transfer, Data Loss Prevention (DLP), full disk encryption, firewall rule assessments, log management/correlation, secure password storage/retrieval, application whitelisting, vulnerability management, threat hunting, etc.
• Manage Endpoint Detection and Response (EDR) and Anti-Virus solutions deployed within the environment.
• Identify security threats and provide recommendations and remediation steps.
• Perform other job-related functions as assigned
• Demonstrate behaviors consistent with the Company’s Vision, Mission, and Values in all interactions with customers, co-workers, and suppliers and adheres to all company policies, procedures, and safety standards
• Identifying and recommending potential areas where existing data security policies and procedures require change, or where a supplement is required to mitigate key security risks. Partner with various business units to enhance security policies/procedures

Experience:

• 3-5 years’ experience managing firewalls, rules and policies – preferably with Palo Alto and/or Zscaler
• Preferred 3-5 years' experience working in a Security Operations Center (SOC) / alerts handler
• Working with Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR)
• Creating and maintaining data security documentation, runbooks, policies, and procedures
• Assisting in the identification, response, investigation, and remediation of potential breaches of and issues surrounding data security
• Providing support during off hours in an on-call rotation
• Supporting programs for compliance monitoring, and security compliance; maintaining information security devices and software; monitoring compliance procedures; and resolving security policy issues

Qualifications:

• B.S. Degree required in Computer Science, Information Technology, or related field of s