Security Engineer ( Hybrid) || MICHIGAN (Need Local Candidates)

DMS Vision•Frisco, MI

22h•Hybrid

About The Position

The Security Engineer provides guidance across information security to align and establish security strategy with business requirements. The role supports security compliance, engineering, administration, monitoring, investigations, risk remediation, and recovery planning. The position is hybrid in Okemos, Michigan, and has a stated duration of 6+ months.

Requirements

Bachelor's degree in information technology or a related field, or a suitable combination of education, training, and/or experience.
Seven years of experience in information security or system administration, or a suitable combination of education, training, and/or experience.
Experience in network security engineering, configuration, and support.
Strong knowledge of information security principles and practices; intrusion detection systems; installation, configuration, monitoring, and response to security systems; security protocols and standards; software and security architectures; risk management; control techniques and frameworks; planning and project management; and relevant regulations and laws.
Ability to lead teams, collect and analyze complex data, use data extraction and analysis tools, and apply active listening skills.
Effective verbal and written communication skills.
Recent hands-on experience with NIST 800-53, PCI-DSS, regulations, risk management, networking and firewalls, GRC, scripting, and cloud security (Azure, AWS, or Google Cloud).

Nice To Haves

CISSP certification is preferred but not required.
Hands-on experience with Azure, AWS, or Google Cloud security.

Responsibilities

Assist with audits of corporate information systems to ensure compliance with security policies, NIST security controls, PCI-DSS, and applicable state and federal laws and regulations.
Identify functionality requirements and implement and administer security tools, including firewall configuration, content filtering, SIEM, vulnerability management, and web application firewalls.
Establish control-related standards and procedures and prepare project status reports for management.
Design and coordinate business resumption and recovery testing and evaluation plans for security in support of disaster recovery and business continuity plans.
Identify potential risks and remediate vulnerabilities in the environment.
Monitor logs and alerts from firewalls, log management, intrusion detection systems, content filtering controls, and related systems.
Perform forensic analysis and investigate log alerts and malware.
Provide security analysis and guidance to information security analysts and administrators.
Provide technical problem-solving support for configuration and use of security-enabled applications, systems, and network devices.
Perform technical analysis of commercial and government customer requirements and controls.
Perform other related assigned duties as necessary to complete the primary responsibilities.