Security Engineer

Job Type

Full-Time

General Description

Applies skills as an experienced professional to ensure the security of enterprises. Recommends methods and techniques to achieve optimal results and helps establish a culture of security across the organization. Supports the achievement of compliance and regulatory goals that are based on the high level of security built into our products. Creates processes to support high quality security-operations, with real-time monitoring of security and compliance in corporate environments with a global user community. The incumbent will need to be highly knowledgeable of the concepts of security, compliance, and assessment as well as have the technical ability to converse with software engineers about their plans and security concerns.

Essential Duties and Responsibilities

• Design, implement, and optimize the SIEM system, including the integration of data sources, correlation rules, dashboards, reports, and alerts.
• Monitor and troubleshoot the performance, availability, and security of the SIEM system.
• Develop and update the SIEM documentation, procedures, and training materials.
• Serve as the subject matter expert (SME) for SIEM & EDR/XDR, solutions within the organization.
• Design, configure, and manage security tools and technologies to detect and mitigate threats, ensuring optimal tuning and integration of SIEM, EDR/XDR technologies.
• Continuously monitor security systems for anomalies and potential security incidents, initiating response protocols and mitigating threats in real time.
• Develop, implement, and maintain comprehensive security policies, procedures, and controls that align with industry best practices and regulatory requirements.
• Conduct thorough security assessments, audits, and penetration testing to identify and address vulnerabilities, enhancing the security posture of the organization.

Essential Duties and Responsibilities (cont.)

• Collaborate with IT, network, and development teams to ensure the integration of security considerations in the infrastructure and across the software development lifecycle.
• Provide expert advice and guidance to project teams regarding the selection and implementation of appropriate security technologies.
• Support incident response activities, including forensic analysis and remediation efforts, to minimize impact from security breaches.
• Provide security requirements analysis of enterprise and cloud architectures and designs.
• Identify technical gaps, provide solution recommendations for service acquisitions, development, migration, implementation, and performance, and participate in the activities.
• Explain security controls, requirements, and guidance to security management.
• Aligns security deliverables with legal, regulatory, and contractual requirements that conform with security framework and standards such as NIST SP 800-53 rev 4, NIST-CSF, PCI-DSS, among others.
• Reports on findings and recommendations for corrective action.

Essential Duties and Responsibilities (cont.)

• Performs SecOps related assessments as assigned utilizing security tools and methodologies.
• Identifies opportunities to reduce risk and documents remediation options regarding acceptance or mitigation