Principal Engineer, Network Security Engineering

Cencora • Conshohocken, PA

4d

About The Position

The Principal Engineer, Network Security Engineering analyzes security threats, vulnerabilities, compliance requirements, and organizational risks, then advises management and leads plans to mitigate risk. The role oversees risk and compliance assessments and information-security incident response, including investigations, countermeasures, recovery, and coordination with third-party responders.

This position provides technical guidance to network and system administrators and other ISO Engineers, helps maintain and improve infrastructure, and ensures security controls are incorporated into system acquisition, development, change management, and service-level agreements. The engineer leads the implementation and refinement of security policies, procedures, and standards across platforms and applications, and collaborates with business, IT, product, and engineering teams to design, review, and implement cybersecurity, data-security, and cloud-security solutions.

The role monitors emerging cyber threats and security events, analyzes metrics for executive review, responds to alerts, escalates critical incidents, and participates in incident-response exercises. It also researches and deploys security tools for areas including cyber operations, threat hunting, vulnerability management, offensive security, email security, mobile, IoT, distribution centers, and cloud environments. The position serves as a subject matter expert for product research and development teams and communicates security issues and concepts to clients, peers, management, and vendors.

Requirements

• At least 8 years of directly related or relevant experience, preferably in information security.
• Bachelor’s degree in Computer Science, Information Technology, or another related discipline, or equivalent related experience.
• Knowledge of network solutions and systems, cybersecurity, root cause analysis, and information-security standards including SOX, ISO 27001/27002, COBIT, ITIL, NIST, and PCI.
• Knowledge of advanced encryption, application architecture, identity and access management, and IT risk management.
• Knowledge of threat-modelling tools.
• Knowledge of Microsoft Office Suite.
• Programming and development language skills in JavaScript, HTML/CSS, Python, and SQL.
• Knowledge of security tools including SIEM, EDR, email security gateways, SOAR, firewalls, antivirus, VPN, IDS/IPS, and proxies.

Nice To Haves

• Azure Security Engineer Certification.
• Certified Cloud Security Professional (CCSP).
• Certification in Information Security Strategy Management (CISM).
• Certified Information Systems Security Professional (CISSP).
• CompTIA Security+.
• Systems Security Certified Practitioner (SSCP).

Responsibilities

• Analyze threat, news, and compliance trends in relation to organizational risk; advise management and develop and execute compliance and risk-mitigation plans.
• Oversee risk and compliance self-assessments and coordinate third-party risk and compliance assessments.
• Oversee responses to information-system security incidents, including investigation, countermeasures, recovery, and coordination with third-party incident responders.
• Analyze and recommend security controls and procedures throughout information-system acquisition, development, and change-management lifecycles, and oversee compliance.
• Develop methods to monitor and respond to security events and assist with cyber incident remediation.
• Provide technical guidance to network and system administrators; monitor and maintain infrastructure, improve system performance, and automate security-related system administration.
• Provide technical guidance, coaching, and mentorship to other ISO Engineers.
• Oversee service-level agreements to ensure security controls are upheld.
• Lead implementation of enterprise-wide security policies, procedures, and standards across platforms and application environments.
• Develop, refine, and implement security policies, procedures, and standards to meet internal and external compliance responsibilities.
• Interface with business and IT leaders to communicate security issues and respond to requests for assistance and information.
• Coordinate with senior technical executives and testing, development, and other IT teams to design, develop, and implement systems that protect company assets.
• Review technical and functional design documents and build, maintain, and implement cybersecurity, data-security, and cloud-security solutions.
• Consult with business and technical staff about potential business impacts of proposed security-environment changes.
• Provide security briefings on critical issues that may affect the enterprise.
• Analyze metrics and KPIs and generate insights for executive review.
• Monitor and analyze emerging cyber threats, vulnerabilities, and exploits relevant to company infrastructure and products.
• Work with information security and line-of-business management to identify and implement security solutions and controls and maintain and configure security tools.
• Coordinate with systems and network engineers to ensure servers and network devices meet security standards and security controls function as designed.
• Research and deploy tools for cyber operations, threat hunting, vulnerability management, offensive security, email security, mobile, IoT, distribution centers, and cloud environments.
• Respond to security alerts, escalate critical incidents to appropriate support teams, and participate in incident-response exercises.
• Serve as a subject matter expert for product research and development teams, working with software engineers, product management and development, and divisional and corporate information systems.

Benefits

• Medical, dental, and vision care.
• Wellness resources focused on physical, emotional, financial, and social well-being.
• Support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family-building support, behavioral health solutions, paid parental leave, and paid caregiver leave.
• Training programs and professional development resources.
• Mentorship programs.
• Employee resource groups.
• Volunteer activities.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal