Security Engineer
EXPANSE FINANCIAL TECHNOLOGIES INC•Village of Westbury, NY
•Onsite
About The Position
The Security Engineer is responsible for securing, maintaining, and monitoring our enterprise infrastructure and networking security. The role is tasked with detecting vulnerabilities, planning with departments for deployment, and remediating vulnerabilities within the infrastructure. The Security Information Engineer is also tasked with deploying best practices for securing information as well as platforms in the infrastructure.
Requirements
- Four-year degree or higher in Information Systems or Security, or related field or equivalent combination of work
- Very strong Hands-on experience (Required 5+ years) of computer related security experience in a technical role within Information Technology
- Advanced understanding of infrastructure. Active Directory, Exchange, Windows desktop/server OS, VMware, storage systems, DNS, firewalls
- Advanced understanding of protocols. WMI, SNMP, TLS, SSL, SMB, Cypher Suites
- Advanced understanding of securing systems and platforms through device/policy hardening
- Understanding of SSL Certificates
- Ability to communicate technical information in a clear manner, both written and verbally, to end users
- Proficient knowledge of MS Outlook, Word, Excel, Visio and PowerPoint
Nice To Haves
- Previous engineering experience preferred
- Working knowledge of various Identity and Access management systems a plus
- CISSP, CISM, CISA, CCSP, ITIL, Security + or other related certification preferred
- Experience with HIPAA, HITRUST, HITECH, PCI, ISO 27001, ISO 27002, URAC regulations and awareness and/or experience with CMS, NIST and other healthcare industry related regulations
Responsibilities
- Manage IT Security operations
- Vulnerability detection through scanning platforms (Rapid7)
- Implementation and planning with business and engineering team of found vulnerabilities
- Remediation of vulnerabilities through multiple vectors (WSUS, GPO)
- Antivirus policy creation, reporting, and remediation on malicious files (SentinelOne)
- Plan for GPO policy upgrades to secure business operations (Active Directory)
- Audit and remediation of access permissions for NFS/NTFS systems (Shared folders)
- Adhere to best practices of securing currently used applications and platforms (MFA, Certificate)
- Coordinate with staff for deployment of remediation’s with urgent vulnerabilities (Emergency Remediation, I.E WannaCry)
- Participate in internal and external audits (HiTrust)
- Maintain or create policies, procedures, and other documentation when necessary
- Find security gaps within the infrastructure
- Development and Documentation of Security Practices
- Lead and execute projects for security
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
