Security Services Engineer II

GCI Communication Corp•Anchorage, AK

About The Position

GCI's Security Services Engineer II will manage and maintain multiple security systems across different technologies for all ESO teams. Work with rest of SSA team and application stakeholders to harden systems against unauthorized use. Recommend and improve existing systems through automation or changes in service delivery. Capable of developing relationships with other teams across GCI to work together towards providing valuable security tools to help ensure a secure working environment. ESSENTIAL DUTIES AND RESPONSIBILITIES AT ALL LEVELS: Strong capacity to make detailed documentation, processes, and diagrams on assigned systems or projects. Willingness to work alongside teammates in an environment centered around contributions to high priority tasks and learning new technologies. Maintain a high degree of confidentiality and familiarity with chain of custody requirements when assisting other ESO teams during an investigation. Capable of working directly with vendors and providing analysis to both existing process and system improvements Ability to track and manage project deadlines or deliverables while keeping notes on key performance indicators. Attend collaboration and improvement sessions with business owners with an emphasis on securely enabling business. Work directly with vendors while maintaining a professional presentation reflective of the company image.

Requirements

High School diploma or equivalent.
Bachelor’s degree in computer science, technology, security, or relevant field.
Minimum of four (4) years’ experience in information technology infrastructure, programming development, support, operations, systems, security, administration, access control, cryptography, architecture, analysis, disaster recovery, investigations, compliance, or technical legal areas (such as those involved in law enforcement, prosecution, defense, or forensics) or related background.
Ability to think outside of the box and document areas improvement to infrastructure capacity and redundancy.
Familiarity with virtual and template driven deployments.
Familiarity with scripting and programming languages such as Powershell, Python, Perl, bash, JavaScript, C / C++, C#, Java, VB.
Knowledge of network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts.
Excellent technical knowledge and a wide range of security technologies, such as network security appliances, Identity and Access Management (IAM) systems, anti-malware solutions, automated policy compliance tools, and desktop security tools.
Familiarity in a multi-platform, multi-service environment – Windows, Linux, Mac, wireless, databases, web application stacks, Active Directory, virtualization, and cloud computing.
Familiarity IT processes include incident management, problem management, change management, and release management.
Audit, compliance, and governance familiarity.
MS Office knowledge (e.g., Outlook, Teams, Word, Excel).

Nice To Haves

Experience within a telecommunication industry.
Two information security certifications.
Other information security, telecom industry or job specific certifications.

Responsibilities

Make detailed documentation, processes, and diagrams on assigned systems or projects.
Work alongside teammates in an environment centered around contributions to high priority tasks and learning new technologies.
Maintain a high degree of confidentiality and familiarity with chain of custody requirements when assisting other ESO teams during an investigation.
Work directly with vendors and providing analysis to both existing process and system improvements
Track and manage project deadlines or deliverables while keeping notes on key performance indicators.
Attend collaboration and improvement sessions with business owners with an emphasis on securely enabling business.
Work directly with vendors while maintaining a professional presentation reflective of the company image.
Mentorship and training of tier I engineers.
Improve and enhance operational security procedures, tasks, and controls.
Create and implement security controls, procedures, and tools with some basic automation capacity.
Define security configurations, standards, and rules for security systems and applications, including policy assessment and compliance tools, network security appliances, and host-based security systems.
Receive and review audit findings, manage the collection of responses and remediation plans.