Cyber Security Engineer

UGI Corporation • Upper Merion Township, PA

2d • Onsite

About The Position

Protect systems and data from theft, misuse, breach, and compromise to ensure systems functionality and data remain available and secure. Assist in security incident investigation including incident response and forensics, detecting and responding to threats and compromises. Responsible for cybersecurity tasks to protect and defend information and information systems, compliance and monitoring of systems and applications, and vulnerability management. Provide guidance for configuring and validating security appliances such as firewalls, email filters, proxies, and anti-malware tools.

Requirements

• Experience administering enterprise security technologies, including SIEM and log management platforms, endpoint detection and response, email security, data security and file activity monitoring, vulnerability management, and enterprise mobility and device management.
• Understanding of information security concepts, policies, and procedures.
• Excellent problem solving techniques and listening skills.
• Experience implementing NIST and ISO industry standards.
• Experience handling security incident response.
• Bachelor's degree in computer science or a related field preferred.
• Three (3) or more years of cybersecurity analysis experience.
• ITIL Foundation certification (at hire or within 12 months in position).
• Intermediate level cloud certification is an important requirement, at hire or within 12 months in position. Acceptable certifications include AWS Certified Solutions Architect Associate, AWS Certified Security Specialty, Microsoft Certified Azure Security Engineer Associate (AZ-500), or Microsoft Certified Azure Administrator Associate (AZ-104).

Nice To Haves

• Hands-on experience securing and monitoring public cloud environments is a plus, with AWS and Microsoft Azure preferred. This includes cloud identity and access management, native logging and monitoring services, and cloud security posture and configuration review.
• Preferred: CISSP, CEH, or Security+ certification.

Responsibilities

• Manage and administer cybersecurity technology, including data security and file activity monitoring, email security, vulnerability scanning, web content filters and proxies, IDS/IPS, SIEM and log management, DNS security, data loss prevention, and endpoint protection.
• Assist with the configuration and monitoring of cybersecurity appliances.
• Lead research, review, and management of cybersecurity events.
• Assist with planning and management of response to cybersecurity incidents and remediation.
• Collaborate in the development and execution of policies and procedures to ensure information system reliability and accessibility.
• Assist with developing new security mitigation, monitoring procedures, and strategies.
• Monitor and support security of cloud environments, including identity and access management, logging and telemetry collection, configuration review, and investigation of cloud-based alerts.
• Participate in ongoing cybersecurity training to promote security awareness and improve operational efficiency.
• Train new personnel, ensuring they are familiar with policy, procedures, standards, and cybersecurity tools.
• Perform security assessments and assist with internal penetration tests to reduce cybersecurity risk.
• Recommend new security tools to management and provide guidance and expertise in their implementation.
• Mentor IT and cybersecurity staff and assist with the establishment of best practices.
• Perform other duties as requested.

Benefits

• AmeriGas is a Drug Free Workplace. Candidates must be willing to submit to a pre-employment drug screen and a criminal background check. Successful applicants shall be required to pass a pre-employment drug screen as a condition of employment, and if hired, shall be subject to substance abuse testing in accordance with AmeriGas policies. As a federal contractor that engages in safety-sensitive work, AmeriGas cannot permit employees in certain positions to use medical marijuana, even if prescribed by an authorized physician. Similarly, applicants for such positions who are actively using medical marijuana may be denied hire on that basis.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level