SR ENTERPRISE SECUR ENGINEER

SUMMARY

Provides lead engineering support on cybersecurity/network systems, including endpoint protect, security log management and email security. This position will assist with designing, reviewing, and implementing critical security solutions to support the Azure public cloud infrastructure. Develops the implementation architectural strategy and programs necessary to protect the Agency's enterprise information and technology systems, data, and various networks. Responsible for the selection, implementation and management of technical resources required to protect MARTA's enterprise, train control and Close Circuit TV (CCTV) networks. Implements cybersecurity projects to improve cybersecurity visibility, monitoring, security compliance, and disaster recovery. Ensures that train control and enterprise networks have effective defense in depth protection. Oversees the testing and execution of implementation plans. Identifies business, technical, and infrastructure issues solving potential IT/cybersecurity risks. Serves as subject matter expert in the completion of technical cybersecurity project tasks and other day-to-day implementation responsibilities. Responsible for the technical design, integration, and support of security tools with network dependencies and various hardware and software technologies within the Department of Information Security. Provides support on network security systems, including advanced endpoint security solution, application white listing, file integrity monitoring, endpoint encryption, email filtering, firewalls, intrusion detection and intrusion prevention systems. Participates on the Incident Response Team. Provides incident response support using various log management systems. Participate in the network vulnerability management efforts throughout the Authority.

ESSENTIAL DUTIES AND RESPONSIBILITIES     

1. Assists the Chief of Information Security (CISO) in developing a cyber security program that proactively protects the integrity, confidentiality, and availability of MARTA's enterprise data, information systems, train control and various networks. 

2. Identifies and deploys new tools and/or processes to improve MARTA's cybersecurity effectiveness and the company's overall cybersecurity posture. 

3. Utilizes understanding of the current cybersecurity threat landscape and applies best practices to new and existing cybersecurity tools and incident handling processes. 

4. Ensures log management systems are fully functioning and collects relevant logs source and feeding logs into MARTA's SIEM systems. 

5. Deploys software packages to cybersecurity systems and updates Endpoint Protection on existing clients.  Verifies Endpoint Protection clients are online and functional. Responds to Endpoint Protection clients’ messages and applies solutions accordingly. Creates Endpoint Protection policies based on a specified design, documents components that make up the Endpoint Protection infrastructure. 

6. Manages the implementation and creation of policies for firewalls, Data Loss Prevention (OLP), Encryption and Mobile Device Management (MOM) technologies.

7. Participates in incident response planning, the investigation of security breaches, and assists with remediation of matters associated with such breaches as necessary.

8. Works with outside vendors and consultants as appropriate for product reviews and independent security assessments. 

9. Provides technical expertise to research, evaluate, recommend, and plan implementation of new or improved IT security tools, devices, and/or software. Serve as the lead engineer on Cisco Identity Services Engine (ISE) policies.

10. Maintains, conducts scans, and produces scan reports from various vulnerability management tools.

11. Collects, correlates, and monitors logs from cloud-based information systems.

12. Provides technical vision, direction, and guidance to leadership team on best practices in the support of the design and implementation of the Azure cloud-infrastructure. 

13. Identifies and implements detailed security configuration requirements, cloud-based solutions and technical controls for products, infrastructure, and services in Azure cloud. 

14. Serves as a cloud security SME for cloud projects and inquiries. Leads projects from development to completion. 

15. Performs other related duties as assigned.

EDUCATION AND/OR EX