Principal, Information Systems Security

American Red Cross

1d • $97 - $120 • Remote

About The Position

WHY CHOOSE US? Joining The American Red Cross is like nothing else – it’s as much something you feel as something you do. You become a vital part of the world's largest humanitarian network. Joining a team of welcoming individuals who are exceptional, yet unassuming. Diverse, yet uncompromising in unity. You grow your career within a movement that matters, where success is measured in people helped, communities made whole, and individuals equipped to never stop changing lives and situations for the better. When you choose to be a force for good, you’ll have mentors who empower your growth along a purposeful career path. You align your life’s work with an ongoing mission that’s bigger than all of us. As you care for others, you’re cared for with competitive compensation and benefits. You join a community that respects who you are away from work as much as what you do while at work. WHAT YOU NEED TO KNOW ABOUT THE JOB: We are seeking a highly skilled and motivated Security Engineer to join our team, specializing in perimeter and cloud security. The ideal candidate will have extensive experience with Cisco ASA, Cisco Meraki, VPN, Azure Firewall, WAF deployment and maintenance, AWS Cloud Security, Network Detection and Response management, and Incident response. This role requires a proactive individual who can effectively safeguard our network and cloud infrastructure against emerging threats. Monitor, evaluate and maintain systems and procedures to ensure the safety of information systems assets and protect systems from intentional or inadvertent access or destruction. Additionally, the role will coordinate communication of security procedures to users, apply specialized technical expertise to solve critical issues and execute projects of high complexity, scope, size and/or risk, serve as a lead on projects, provide training and guidance to other staff and volunteers. The work location for this position is 100% virtual/work from home and can be worked from anywhere in the United States.

Requirements

• Education: Bachelor's degree in Computer Science, Computer Engineering, or related discipline required.
• Experience: Minimum 7 years of related experience or equivalent combination of education and related experience required.
• Skills & Abilities: Effective verbal and written communication skills. Ability to apply technical expertise to resolve problems. Ability to effectively prioritize and execute tasks efficiently. Ability to work on a team
• Travel may be required.
• Combination of candidate’s education and general experience satisfies requirements so long as the total years equate to description’s minimum education and general experience years combined (Certification cannot be substituted).

Nice To Haves

• One of the following certifications preferred: CISSP, CISM, CISA,GSEC or equivalent information security certification.

Responsibilities

• Perimeter Security Management: • Conduct regular security assessments and security recommendations to reduce the risks on Cisco ASA and Cisco Meraki firewalls. • Coordinate with Engineering Team to maintain secure VPN solutions to ensure safe remote access. • Develop and enforce firewall policies and rulesets to protect against unauthorized access and threats.
• Cloud Security: • Design, deploy, and manage Web Application Firewall (WAF) solutions. • Oversee Azure and AWS cloud security, ensuring the implementation of best practices and compliance with industry standards. • Conduct regular security assessments and audits of cloud environments to identify and mitigate risks.
• Network Detection and Response: • Implement and manage Network Detection and Response (NDR) solutions to identify and respond to suspicious activities. • Analyze network traffic and security logs to detect and address potential security incidents. • Develop and maintain incident response plans and procedures to ensure quick and effective handling of security breaches.
• Incident Response: • Assist and coordinate incident response efforts to contain and remediate security incidents. • Perform root cause analysis of security incidents and recommend corrective actions. • Document and report on security incidents, including the impact, resolution, and preventive measures.
• Collaboration and Communication: • Work closely with IT, DevOps, and other cross-functional teams to ensure security is integrated into all aspects of network and cloud infrastructure. • Stay updated with the latest security trends, threats, and technologies, and recommend improvements to the security posture.
• Plan, design, enforce and audit security policies and procedures which safeguard the integrity of and access to enterprise systems, files and data elements.
• Identify potential threats and respond to reported security violations. Determine causes of security violations and implement corrective actions to ensure data security.
• Research, recommend, and implement changes to procedures and systems to enhance data systems security.
• Develop systems to interface with user community to understand their security needs and implement procedures to accommodate them. Oversee security awareness programs and provide education on security policies and practices.
• Provide management with risk assessments and security briefings to advise them of critical issues that may affect customer, or corporate security objectives.
• Provide training and guidance to other staff. Lead and contribute technical expertise to projects.

Benefits

• Medical, Dental Vision plans
• Health Spending Accounts & Flexible Spending Accounts
• PTO: Starting at 19 days a year; based on type of job and tenure
• Holidays: 11 paid holidays comprised of six core holidays and five floating holidays
• 401K with up to 6% match
• Paid Family Leave
• Employee Assistance
• Disability and Insurance: Short + Long Term
• Service Awards and recognition

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level