Technologies-Security Engineer

Puyallup Tribe of Indians•Tacoma, WA

1d•Onsite

About The Position

Under general direction, the Security Engineer provides expert technical and organizational guidance on complex IT security solutions to protect the Puyallup Tribe of Indians’ mission-critical, enterprise-wide business applications and systems from cybersecurity threats. The role provides incident response leadership, threat and vulnerability management guidance, security consulting, firewall administration, and security expertise for projects. It also supports IT staff and keeps current on security measures and threats affecting enterprise hardware and software products. This position is in the IT department, reports to the Director, and is full-time at 40 hours per week. It has no supervisory responsibilities. The work is performed in an office setting with moderate noise, low-to-moderate physical exertion, and frequent contacts and interruptions. The job requires occasional lifting or moving of up to 50 pounds and occasional standing, walking, and stooping, kneeling, crouching, or crawling. The position description may be revised as organizational needs arise and does not constitute an employment contract.

Requirements

Bachelor’s degree (four-year degree) in a related field.
At least eight years of IT experience in a complex or enterprise IT environment across multiple disciplines, such as IT security, network engineering, application security, database, risk management, or project management.
At least eight years of experience in two or more of the following: vulnerability management, penetration testing, firewall management, intrusion detection and prevention, application security, digital forensics, antivirus or malware management, network security, desktop security, security assessments, or security project requirements.
Ability to read and interpret documents such as safety rules, operating and maintenance instructions, and procedure manuals.
Ability to write routine reports and correspondence and speak effectively before groups of customers or employees.
Ability to perform basic arithmetic and compute rates, ratios, and percentages, and to draw and interpret bar graphs.
Ability to solve practical problems involving concrete variables and limited standardization, and interpret written, oral, diagrammed, or scheduled instructions.
Must have and maintain a valid, unrestricted driver’s license and proof of auto insurance.
Must be detail-oriented and adhere to strict confidentiality rules.
Must successfully pass a background check before employment and periodically throughout employment.
Ability to operate a typewriter, personal computer, multi-line telephone, calculator, facsimile machine, photocopier, and ten-key.
Ability to read, write, communicate, and interpret information accurately in English; concentrate and consistently produce accurate work.
Must be able to meet the position’s physical demands, with reasonable accommodations where applicable.

Responsibilities

Analyze, research, and assess risks; determine appropriate responses; guide IT system owners in ensuring infected systems are cleaned; and lead incident response services as a subject matter expert.
Mentor IT staff in threat and vulnerability management solutions.
Schedule penetration tests.
Perform regular vulnerability assessments and create employee education and teaching curricula covering social engineering, policy and procedure testing, and Acceptable Use Policy review.
Provide security consulting to business areas, IT staff, IT leadership, and vendors; explain technical security concepts to different audiences; and analyze business-area and technical-group proposals.
Administer firewalls, analyze requests for new access control lists, diagnose and resolve firewall-related network problems, and set requirements for other firewall technologies.
Serve as the IT security expert for projects, manage work breakdown structures, and coordinate work with other teams.
Research, analyze, monitor, troubleshoot, and resolve data and voice network security problems.
Stay current on security measures and threats related to enterprise hardware and software products.
Provide support to IT staff as necessary.
Perform other duties as assigned.