Senior Cloud Systems Engineer - Cyber Security

Penske•Reading, PA

13h

About The Position

The Senior Systems Engineer – Cyber Security works with a team of experts to create solutions for Penske’s security needs. The role defines and promotes security policies, oversees user and network security access, and monitors the use of data systems to safeguard company information. It also recommends and evaluates security products and manages security projects and solution implementations to meet client group expectations. The engineer reviews security for new systems, maintains firewall protections and security monitoring capabilities, supports SOX and PCI compliance, and collaborates with IT teams to resolve usability issues and develop security infrastructure. The role may manage multiple large-scale, cross-functional projects concurrently and mentor Security Engineers, Administrators, and offshore contractors.

Requirements

Bachelor’s degree or equivalent experience.
At least six years of functional experience.
At least six years of experience and advanced knowledge of firewall software and hardware, such as Cisco ASA and Palo Alto.
At least six years of experience and advanced knowledge of proxy filtering, such as Blue Coat Proxy.
At least six years of experience and advanced knowledge of centralized log configuration and analysis, such as Splunk.
At least six years of experience and advanced knowledge of IDS/IPS configuration and analysis.
At least six years of experience and advanced knowledge of SSO infrastructure, such as CA SiteMinder, LDAP, and RSA IdM.
At least six years of experience and advanced knowledge of network vulnerability scanning, such as Nessus/Tenable.
At least six years of experience and advanced knowledge of advanced user authentication structures, such as Cisco ACS and RSA ACE servers.
At least six years of experience and advanced knowledge of OS hardening and security for IBM i, Linux, Mac, and Windows.
At least six years of experience and advanced knowledge of application vulnerability scanning.
At least six years of experience and advanced knowledge of TCP/IP networking and packet capture applications such as tcpdump and Wireshark.
At least six years of experience and advanced knowledge of endpoint protection solutions such as CrowdStrike and McAfee.
At least six years of experience and advanced knowledge of encryption technology and SOX, PCI requirements, and auditing.
One to two years of project management experience, including mid-to-large-scale projects and managing multiple projects at one time.
Regular, predictable, full attendance is an essential function of the job.
Willingness to travel as necessary, work the required schedule and at the required location, complete a Penske employment application, undergo a background investigation, and submit to drug screening.

Nice To Haves

Advanced degrees or certifications.
IT security certification such as CISSP or CISM.

Responsibilities

Define and promote security policies and ensure associates follow security standards.
Oversee the setup of user security access, administer network security access, and monitor associates’ use of data systems.
Provide security reviews and define security models for new systems.
Analyze and recommend security products based on their performance.
Maintain network, server, and workstation firewall protection, and provide network and application scanning, security logging, and intrusion detection capabilities.
Audit access to mission-critical applications and maintain compliance documentation for SOX and PCI; analyze and review annual SOX and other compliance reports.
Collaborate with IT teams to discuss, analyze, and resolve usability issues and update or create security infrastructure.
Work concurrently on one to three large-scale, cross-functional projects assigned by department and group senior leadership.
Mentor Security Engineers, Administrators, and offshore contractors.
Analyze data to identify exceptions, last usage, and the necessity of access to computer applications and systems.
Modify computer security files to incorporate new software, correct errors, or change individual access status.
Encrypt data transmissions and configure and maintain firewalls to protect confidential information and prevent tainted digital transfers.
Design and maintain intrusion detection processes and infrastructure.
Test and document computer security and emergency measures, policies, and procedures.