Information Security and Intelligence Engineer

Maintaining efficiency and economy in operations management requires flexibility in job assignments. While each employee shall have a primary responsibility for the job in which that employee has been hired or later promoted to, each employee may be expected to perform other jobs from time to time.

SUMMARY:

The Information Security and Intelligence Engineer (ISE) is responsible for safeguarding MTS’s digital assets, ensuring the confidentiality, integrity, and availability of critical system and sensitive information. This role will assist the Information Security Manager in designing, implementing, and maintaining security measures to protect the MTS systems, networks, and data from potential cyber threats. ISE expertise will contribute to maintaining a secure and compliant environment that aligns with industry standards and best practices.

Application Review: Priority will be given to applications received by June 16, 2025.
The position will remain open until filled.

EXAMPLES OF DUTIES:

Essential Functions

Security Infrastructure Management

• Designs, implements, and manages security systems and tools, such as firewalls, intrusion detection systems, intrusion prevention systems, anti-malware solutions, and encryption mechanisms.
• Regularly assesses the effectiveness of security controls and adjust as necessary to address emerging threats.

Vulnerability Management

• Conducts regular vulnerability assessments and penetration tests to identify and address potential weaknesses in SDMTS systems and networks.
• Collaborates with system administrators and developers to remediate vulnerabilities and track progress.

Incident Response

• Develops and maintains an incident response plan to effectively handle security breaches and incidents.
• Leads incident response efforts, including containment, analysis, and recovery, to minimize damage and prevent future occurrences.

Security Auditing and Compliance

• Monitors and enforces compliance with relevant security standards, regulations, and best practices (e.g., NIST,HIPAA and PCI DSS).
• Conducts regular security audits and assessments to ensure adherence to policies and procedures.

Security Awareness and Training

• Provides training and awareness programs to educate employees about security best practices and the importance of maintaining a secure computing environment.

Security Architecture Design

• Collaborates with IT teams to integrate security requirements into the design and architecture of new systems, applications, and infrastructure.

Security Documentation

• Maintains accurate and up-to-date documentation related to security policies, procedures, configurations, and incidents.

Threat Intelligence

• Stays informed about the latest security threats, vulnerabilities, and attack techniques, and applies this knowledge to enhance security strategies.

Continuous Improvement

• Stays up-to-date with industry trends, emerging technologies, and security best practices, and proposes enhancements to the security posture based on these insights.

Duties May Include, But Are Not Limited To, The Following:

• Uses technical language to write documentation, such as design documents, process guides, procedure manuals, work flow diagrams, screen mock-ups, end-user communications and regular project status reports.
• Effectively manages projects and lead project teams.

• Performs other duties as assigned.

Knowledge, Skills and Abilities:

The role of a professional Information Security Engineer encompasses a wide array of knowledge, skills, and abilities to safeguard MTS’s digital assets. This individual must possess an in-depth understanding of security systems and tools, including firewalls, intrusion detection systems, anti-malware solutions, and encryption mechanisms