Senior Info Security Engineer

HD Supply•Atlanta, GA

3d•Onsite

About The Position

Responsible for day-to-day efforts on Information security risk management for the organization, focusing on detailed technology issues. Identifies key barriers/core problems and applies problem solving skills in order to deal creatively with complex situations. Troubleshoots and resolves complex problems. Makes decisions under conditions of uncertainty, sometimes with incomplete information, that produce effective end results. Independently performs assignments with instruction limited to the expected results. Determines and develops an approach to solutions. Receives technical guidance only on unusual or complex problems or issues. May oversee the completion of projects and assignments, including planning, assigning, monitoring and reviewing progress and accuracy of work, evaluating results, etc. Contributes to employees' professional development but does not have hiring or firing authority.

Requirements

BS/BA in a related discipline OR MS/MA in a related field.
Generally 5-8 years of experience in a related field OR 3-5 years of experience in a related field.
Certification is required in some areas.

Responsibilities

Conducts independent test and evaluation of new and existing systems.
Performs testing to include system security testing, vulnerability scanning, security configuration reviews of desktop/laptop images, writing test plans, test cases/scripts, status reports and test summary reports.
Identifies security vulnerabilities and develops algorithms and methods for detecting and preventing host and network based attacks.
Performs advanced analysis and/or reverse engineering of suspect source code and makes the appropriate changes to security event detection systems.
Implements the appropriate processes and tools to deliver sound investigations as well as analyze log files for activities surrounding security events.
Initiates security response procedures when a problem is detected and methodically creates and updates security standard documentation.
Develops attack and defense methodologies for high risk computer networks.
Writes scripts and develop software utilities to automate security analysis efforts.
Performs a wide range of technical operations related to the location, retrieval, processing, review, analysis, and production of electronic data for discovery, audit, or investigation.
Performs quality checks on all data collected, copies final data deliverables to various media, and documents the procedures used in the collection process.
Maintains procedures and devices in compliance with SOX compliance, PCI regulations and other regulatory authorities as required.
Provides data to internal or external auditors for security and compliance audits.
Serves as a liaison between the legal team, outside counsel, IT personnel, and internal organization.