Information Security Engineer

Central Hudson•Poughkeepsie, AR

3d•$73,000 - $171,300•Onsite

About The Position

We are seeking a diligent and experienced Information Security Engineer to join our team. In this role, you will be working within a group of highly motivated Information Technology and Information Security professionals committed to keeping Central Hudson safe. The Information Security Engineer will also be responsible for designing, implementing, and maintaining our information security operations tools to ensure the protection of our organization's critical assets. The ideal candidate will have a strong understanding of modern security principles, excellent analytical skills, and the ability to communicate effectively with internal stakeholders and vendors alike.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or related field of study and relevant work experience in information security engineering or a closely related domain or an associate degree in the aforementioned fields and 3+ years of relevant work experience in information security engineering or a closely related domain. In lieu of a degree, a high school diploma or equivalency degree and 5+ years of relevant work experience in information security engineering or a closely related domain will be considered.
Experience designing, implementing and managing security tools such as firewalls, SIEM, EDR, SOAR, IDS/IP S, encryption, and other security solutions
Strong knowledge of common and emerging attack vectors, penetration methods and countermeasures
Demonstrated ability to effectively manage and respond to security incidents, including identifying, analyzing, and mitigating threats
Experience configuring and administering Windows Servers and Workstations, Active Directory & Group Policy, Microsoft 365, Microsoft Defender, Microsoft Sentinel, Azure Entra ID, Azure compute and networking resources, and RedHat Enterprise Linux and other Linux server flavors
Understanding of security architecture principles, including network segmentation, defense-in-depth, and zero trust models
Understanding of a broad range of security technical concepts
Experience with scripting for automation and analysis (e.g., Python, Bash, PowerShell)
Effective communication skills, with the ability to collaborate with diverse teams, and communicate complex concepts clearly and concisely
Excellent analytical, decision-making skills, multitasking, and organizational skills
Ability to work with limited direct supervision and professionally respond to constructive feedback
Ability to be available for on-call and after hour security incidents
Valid driver’s license

Nice To Haves

7+ years of information security experience in the configuration and support of information security related applications and infrastructure
Experience in Security and/or Regulatory Frameworks such as NIST, CIS Benchmarks, SOX, NERC CIP, etc.
Experience in Energy & Utilities or services industry
Experience with data visualization tools
Relevant certifications such Systems Security Certified Practitioner (SSCP), CompTIA Cybersecurity Analyst (CySA+), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH)

Responsibilities

Designs, implements, and maintains security architecture and solutions to protect the organization's systems, networks, and data from cyber threats
Oversees CSOC tools, including the management of SIEM, EDR, SOAR, and other security solutions, and serves as the CSOC tools technical lead for escalation of functional issues
Continuously improves CSOC tools to optimize analyst efficiency and automate processes where feasible
Develops, documents, and enforces cybersecurity policies, procedures, and standard operating protocols aligned with organizational and regulatory requirements
Conducts regular security audits to ensure systems, configurations, and processes meet established security standards and compliance requirements
Maintains in-depth knowledge of security and networking infrastructure dependencies of the CSOC, including the configuration and status of each
Implements best practices for CSOC log collection, including configuring log sources and ensuring optimal data flow into the SIEM
Partners with IT and security teams to identify new log sources and ensure they are integrated into the SIEM
Performs tool health assessments and tool activity audits to identify both security and operational issues
Participates in collaborative threat intelligence sharing with government and local agencies to stay ahead of emerging threats
Stays updated with the latest cybersecurity trends, threats, and technologies, and applies this knowledge to strengthen the organization's security posture
Maintains a professional presence in the industry and business relationships with key technology-dependent organizations to support the application of technology to relevant business areas
Supports project planning and execution for security initiatives, including tracking timelines and resource needs to achieve on-time and in-budget implementation of best-in-class solutions
Participates in on-call rotation as needed to respond to security incidents outside of regular working hours
Provides support for storm restoration efforts