Information Security Engineer

Cotiviti•Remote,

3d•$108,000 - $139,000•Remote

About The Position

The Information Security Engineer's responsibilities include the build and 2nd level support of key security systems in support of the information security objectives. Operationalizing a wide variety of security systems to include cloud security, IDS/IPS, Next-Gen AV, CASB, email security gateways, SIEM, inventory discovery, and vulnerability management. You will provide training, mentorship, and proper transition of systems to security operations team members. In addition, you will investigate escalated security incidents in partnership with security operations center. Ideal candidate will be a current Information Security Engineer looking for a new challenge or an Infrastructure Engineer who has a demonstrated passion and skillset for information security looking to change roles. Candidates who like the flexibility to learn, manage and optimize numerous tools in support of the SOC and business in a growing InfoSec department. Desire to work in a fully remote position, execute defined objectives with minimal instruction and significant collaboration with team members. Open to receiving differing opinions from team members and giving constructive feedback.

Requirements

Demonstrated passion for information security.
4 years in information security engineering, incident response or IT Infrastructure engineering/support with hands-on exposure to security tools or security controls. This can include email security, security baselines, patch management via configuration management systems, building secure cloud configurations, managing next-gen AV or network security.
Demonstrated project management skills and ability to track and report progress against established milestones, metrics and deliverables.
Excellent written communication skills, demonstrating the ability to write with purpose, clarity, and accuracy to both technical and non-technical audiences.
Excellent aptitude for problem solving. Self-starter, team player, personable, enthusiastic, hardworking, and enjoy interfacing with external and internal customers on a day-to-day basis.
BS degree in Cyber Security/Computer Science/MIS, equivalent or a minimum of 4 years relevant industry experience.
Research emerging technologies in support of security enhancement and development efforts. Assess existing tools for gaps and vulnerabilities.
Knowledge of an industry cyber security regulation/standard (HIPAA, SANS, CIS) and a cyber security framework (MITRE ATT&CK, NIST, HITRUST).
Ability to develop and report metrics/KPIs to management in all areas of responsibility.
Interview, develop, coach, lead and retain top-tier talent, with a focus on building and improving a team and culture that is able to assist in employing best in class practices to support and drive high levels of internal and external customer satisfaction.
Complete all responsibilities as outlined on annual Performance Plan.
Complete all special projects and other duties as assigned.
Must be able to perform duties with or without reasonable accommodation.

Nice To Haves

Hands-on experience implementing & administering a variety of security platforms.
Security certification a plus (CISSP, CEH, CISM, CompTIA Security+).
Demonstrated knowledge and understanding of cloud and cloud security tools highly preferred.

Responsibilities

Build, implement and provide tier 2 support for security tools to include: WAF, NextGen AV, IPS/IDS, SIEM, DLP, email security gateway, vulnerability management, asset inventory.
Operationalizing existing security tools through control validation/improvements, new feature enablement and upgrades in alignment with strategic objectives.
Collaboration with InfoSec & IT team members with a focus on increased operational efficiency of the SOC.
Responding to and investigating escalated security incidents in support of the Security Operations Center. Identifying unauthorized access or processes, containing and eradicating them, and provide supporting documentation to incident response report.
Perform root cause analysis of outage or performance issues that may be related to security tools. Provide recommendations to stakeholders on the best course of action to remedy the problem.
Assist in responses to external audits, penetration tests and vulnerability assessments.
Participate in on-call rotation for urgent support issues including but not limited to weekends, holidays and after-business hours as required to service the needs of the business.
Promoting security awareness and cultivating employees’ into “Security Champions” to further support information security standard methodologies.
As needed - 4 days of consecutive travel every quarter for team meetings.