Information Security Engineer III

Are you looking for more than just a job? Do you want to have a voice and feel a sense of belonging? At ICW Group, we hire innovative people who consistently adapt, grow and deliver. We believe in hard work, a fun work environment, and embracing creativity that only comes about when talented people collaborate to develop solutions. Our mission is to create the best insurance experience possible.
 

Headquartered in San Diego with regional offices located throughout the United States, ICW Group has been named for seven consecutive years as a Top 50 performing P&C company offering the stability of a large, profitable and growing company combined with a small-company entrepreneurial spirit. Our purpose-driven ethos provides team members with opportunities to contribute, develop, and belong. 

PURPOSE OF THE JOB 

The purpose of this job is to design secure architectures and develop cybersecurity approaches and techniques to evaluate the security of a system or network. This position will assist with strategic initiatives for short and long-term plans to identify and reduce the attack surface across applications and systems. The position exists to monitor and defend ICW Group’s technology against potential threats that jeopardize the financial growth and security goals of the Company.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Monitors and defends information systems against unauthorized access, modifications and/or destruction.

• Monitors networks and systems for security breaches, using software that detects intrusions and anomalous system behavior and develops strategies to respond to and recover from a security breach. 
• Leads security incident response, including preparation, detection, analysis, containment, eradication, and recovery.
• Researches and implements methods to remediate network and application security vulnerabilities.
• Leads and participates in security architecture controls reporting, compliance audits, monthly and ad-hoc statistics and trends, and risk-focused reports including internal and 3rd party Risk Assessments.
• Utilizes automated tools to identify, assess, and report security concerns, with emphasis placed on effective communication to stakeholders. Takes an active lead to inform, advise, and partner with business units to help better secure operations.

Leads and runs complex security related projects and resolves security related issues.

• Resolves complex security projects and issues. Develops a set of security standards to respond to and recover from a security breach.
• Provides support by proposing solutions, coordinating implementation, and enforcing information systems security policies, standards, and methodologies.
• Uses advanced technologies including Intrusion Detection & Prevention Systems (IDS/IPS), Firewalls, SIEM, Antivirus, Network Packet Analyzers, Malware analysis and forensics tools to detect intrusions, breaches in compliance, etc.
• Prepares and analyses system security reports by collecting, analyzing, and summarizing data and trends and makes recommendations to improve security.
• Maintains operational security posture for an information system or program to ensure information system security policies, standards, and procedures are established and followed.
• Creates and updates technical security standards for assets and software. 

Serves as cyber security technical subject matter expert and trainer and primary resource for the organization.

• Provides information security expertise to system development teams throughout the life cycle process.
• Partners with systems engineering teams to ensure system design and implementation are consistent with company policies, requirements, and directives.
• Leads and conducts information security risk assessments including documenting processes, service level agreements and best practices.
• Develops the overall security design, development, testing and implementation of security solutions. Recommends compliance strategies that support customer requirements and alignment to company policy.
• Ensures security quality, adherence to security guidelines, profitability, and information security related metrics for self and assigned projects.
• Collaborates with key stakeholders on remediation strategies and follow remediation activities through closure.

Partners with project management and other internal teams in determining overall security solutions.

• Executes technical and process changes required to adopt, maintain, and adjust InfoSec controls as required to manage the company's risks and align with industry best practices.
• Works with peers in other internal groups to drive technical security risk down in targeted areas.
• Takes end-to-end ownership of one or more