DWM Security Engineer I - AIM

City of Atlanta•Atlanta, GA

21h•Onsite

About The Position

Responsible for securing the Department of Watershed Management’s Internet of Things (IoT) network assets. This position addresses issues and inquiries related to IoT, Closed-Circuit Television (CCTV) and access control security from Watershed stakeholders and relevant third-party business partners. Responsibilities include defining IoT, CCTV and access control security prerequisites for Watershed projects, supervising the integration of associated technologies, and fostering collaboration with diverse Watershed and other City of Atlanta Departmental teams to ensure the uniform application of risk-based methodologies across all IoT, CCTV and access control related endeavors.

Requirements

Hands on experience with one or more of the following platforms or technologies: Palo Alto Firewalls, Palo Alto IoT Device Security, Cisco Network solutions, Endpoint Detection and Response (EDR) solutions, Proofpoint, Security Incident and Event Management (SIEM) and Qualys Vulnerability Management platform, Genetec and Lenel S2 systems.
Advanced knowledge of Unix, Linux, Windows and operating systems.
Experience with CCTV camera and gate access control technology.
Knowledge of physical security standards.
Experience with Incident Response (IR) processes and recovery.
Understanding of Networking concepts.
Familiar with Internet of Things (IoT) security concepts.
Advanced knowledge of networking protocols and services such as the following: SFTP, HTTPS, SSH, SMB, LDAP, etc.
Packet analysis tools (tcpdump, Wireshark, ngrep, etc.)
Vulnerability assessment and remediation through patching and other relevant configuration changes.
Experience as a network intrusion analyst.
Familiar with Cloud platforms such as AWS, Azure etc.
Knowledge on security event triaging, investigations pertaining to Cyber threats such as Business Email Compromise (BEC).
Knowledge of information security standards (e.g., PCI, NIST framework, ISO etc.), rules and regulations related to information security and data confidentiality (e.g., FERPA, HIPAA, etc.)
Bachelor’s degree in computer science, Computer, Engineering, Electrical Engineering, Network Security, Information Security, Information Technology, or Mathematics.
4-6 years of relevant experience or equivalent combination of education and work experience: undergraduate degree and 1-2 years of relevant experience, graduate degree and 0-2 years of relevant experience.
GCIA, CISSP GPEN, GWAPT, GCIH, GSEC, OSCP, OSCE, CASP+, CompTIA Security + or similar certification

Responsibilities

Analyze security systems and seek improvements on a continuous basis.
Help drive security standards and best practices.
Advise and implement application, and infrastructure security strategy.
Perform breach, threat, and vulnerability analysis.
Troubleshoot and fix security infrastructure issues.
Handle escalations from Cybersecurity Analysts.
Interact with configure, and troubleshoot network intrusion detection devices and other security systems via proprietary and commercial consoles, both local and remote.
Report possible threats or software issues.
Research weaknesses and find ways to counter them.
Assist fellow employees with cybersecurity, software, hardware or IoT, CCTV and access control needs.
Develop, implement, and monitor security measures to safeguard information, network infrastructure, computer and camera systems.
Deploy, configure, and monitor new security tools.
Help drive user education on information security best practices
Design and execute a comprehensive cybersecurity strategy and architecture.
Identify, define, and document system security requirements, proposing solutions to management.
Configure, troubleshoot, and maintain security infrastructure software and hardware.
Install and manage software for monitoring systems and networks to detect security breaches and intrusions.
Monitor systems for unusual activity and establish preventive measures.
Plan, develop, implement, and update the company's information security strategy.
Provide education and training to staff on best practices for information system security.
Analyze alerts for potential security threats.
Manage vulnerability assessments and remediation efforts.
Conduct risk assessments and develop mitigation strategies.
Collaborate on all IoT, CCTV and access control related projects to ensure security considerations are addressed.
Attend meetings to provide input on security-related matters.
May perform other duties as assigned.