Senior Info Security Engineer

HD Supply•Atlanta, GA

3d•Onsite

About The Position

Responsible for day-to-day efforts on Information security risk management for the organization, focusing on detailed technology issues. This role involves conducting independent tests and evaluations of new and existing systems, including system security testing, vulnerability scanning, and security configuration reviews. The engineer will identify security vulnerabilities, develop algorithms for detecting and preventing attacks, and perform advanced analysis and reverse engineering of suspect source code. They will also implement processes and tools for investigations, analyze log files, initiate security response procedures, and create/update security standard documentation. Additionally, the role involves developing attack and defense methodologies, writing scripts, and developing software utilities to automate security analysis. A significant part of the job includes performing technical operations for electronic data discovery, audit, or investigation, ensuring quality checks, documenting procedures, and maintaining compliance with SOX, PCI, and other regulatory authorities. The engineer will also serve as a liaison between legal teams, outside counsel, IT personnel, and the internal organization.

Requirements

BS/BA in a related discipline OR MS/MA in a related discipline.
Generally 5-8 years of experience in a related field OR 3-5 years of experience in a related field.
Certification is required in some areas.

Responsibilities

Conducts independent test and evaluation of new and existing systems.
Performs testing to include system security testing, vulnerability scanning, security configuration reviews of desktop/laptop images, writing test plans, test cases/scripts, status reports and test summary reports.
Identifies security vulnerabilities and develops algorithms and methods for detecting and preventing host and network based attacks.
Performs advanced analysis and/or reverse engineering of suspect source code and makes the appropriate changes to security event detection systems.
Implements the appropriate processes and tools to deliver sound investigations as well as analyze log files for activities surrounding security events.
Initiates security response procedures when a problem is detected and methodically creates and updates security standard documentation.
Develops attack and defense methodologies for high risk computer networks.
Writes scripts and develop software utilities to automate security analysis efforts.
Performs a wide range of technical operations related to the location, retrieval, processing, review, analysis, and production of electronic data for discovery, audit, or investigation.
Performs quality checks on all data collected, copies final data deliverables to various media, and documents the procedures used in the collection process.
Maintains procedures and devices in compliance with SOX compliance, PCI regulations and other regulatory authorities as required.
Provides data to internal or external auditors for security and compliance audits.
Serves as a liaison between the legal team, outside counsel, IT personnel, and internal organization.