IT Security Engineer

Schwan's Company • Hopkins, MN

19h • $75,000 - $125,000

About The Position

The IT Security Engineer designs and implements IT security infrastructure in partnership with IT Operations and Solution Delivery teams. The role manages vulnerability scanning and assessments, conducts security technology audits, and recommends cost-effective mitigating controls. It monitors internal and external environments for security risks, alerts management to suspicious activity or incidents, and supports incident response and investigations.

The engineer assesses the information security infrastructure and recommends enhancements aligned with the enterprise security strategy. Working with other IT teams, the role tests, plans, and implements security technology; researches and recommends security technologies and remediation approaches; and maintains relationships with external security partners and professional organizations. The position also serves as the communication security custodian for PKI, certificate management, and encryption, and demonstrates understanding of applicable regulations and standards, including PCI, HIPAA, and PII. The employee is expected to act consistently with the company’s mission, values, code of ethics, policies, and standards of conduct.

Requirements

• Bachelor's degree or equivalent in a relevant field.
• Five or more years of related experience, or an equivalent combination of education and experience.
• Expertise with security tools, including next-generation network and application firewalls, intrusion prevention systems, encryption, identity and access management systems, file integrity monitoring, network access control, privileged identity management systems, security information and event management systems, secure configuration management systems, and forensic tools.
• Cloud security experience on major vendor platforms and mobile device security experience.
• Intermediate proficiency with numeric data analysis.
• Strong communication and interpersonal skills.
• Solid understanding of current and evolving technologies.

Nice To Haves

• Certifications demonstrating trust and expertise across information security components, such as CISSP, CISM, or CISA.

Responsibilities

• Design and implement IT security infrastructure in partnership with IT Operations and Solution Delivery teams.
• Manage and conduct vulnerability scanning and assessments as directed.
• Perform security technology audits and recommend cost-effective mitigating controls.
• Monitor internal and external environments for security risks and notify management of suspicious activities or incidents.
• Support incident response processes and investigations as required.
• Assess information security infrastructure and recommend enhancements to support the enterprise security strategy.
• Work with other IT teams to test, plan, and implement enterprise security technology.
• Research, recommend, and/or implement security technologies and remediation approaches.
• Build and maintain relationships with external security partners and professional organizations.
• Serve as the communication security custodian for PKI, certificate management, and encryption.
• Understand regulations and standards applicable to the company, including PCI, HIPAA, and PII.
• Conduct oneself in a manner consistent with company mission, values, code of ethics, policies, and other standards of conduct.

Benefits

• Competitive Total Rewards package focused on overall well-being.
• Health benefits.
• Retirement and financial wellbeing programs.
• Time off programs.
• Wellbeing support programs.
• Eligibility for a 10% annual incentive bonus based on organizational performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level