Senior Information Security Engineer

FAI

About The Position

The Information Security Engineer will monitor computer networks for security issues and investigate security breaches and other cybersecurity incidents. The role installs and operates security measures, including firewalls and data encryption programs, and works with the security team to test for network vulnerabilities, remediate detected vulnerabilities, document security breaches, and assess their impact. The position performs security operations and maintenance, supports ongoing information-system monitoring and risk assessment, evaluates emerging threats and security technologies, and helps coordinate remedial actions. It also contributes to security dashboards and visualizations, disaster-recovery readiness, and the development and optimization of security event monitoring and analysis platforms used by the Information Security Operation team. The role follows ITIL incident, problem, and change-management practices and supports enterprise security policies, processes, and service-level standards.

Requirements

Minimum of 15 years of formal education.
Graduate or postgraduate qualification in Computer Science or Information Technology.
4 to 9 years of professional work experience.
Understanding of basic network services, vulnerabilities, and attacks.
Knowledge of cryptography, application security, access control, malware, exploits, and vulnerabilities.
Knowledge of internet security, networking protocols, and related technologies, including IDS/IPS, firewalls, content filtering, and packet inspection.
Knowledge of cloud technology and concepts.
Basic knowledge of a scripting language or automation.
Knowledge of Windows, Linux, and Unix server platforms.
Experience or knowledge of security management tools and applications, including Sourcefire, Symantec antivirus, Qualys, WebInspect, ArcSight, Vectra, ServiceNow, FireMon, and Microsoft infrastructure applications.
Knowledge of antivirus and malware-analysis tools, open-source scanning tools, reporting tools, and threat-intelligence feeds.

Responsibilities

Monitor computer networks for security issues and investigate security breaches and other cybersecurity incidents.
Install and operate security measures to protect systems and information infrastructure, including firewalls and data encryption programs.
Work with the security team to perform tests, uncover network vulnerabilities, and remediate detected vulnerabilities.
Document security breaches and assess the damage they cause.
Follow ITIL practices for incident, problem, and change management, and use domain knowledge to improve the work output of the ISO team.
Provide guidance and support to technical teams on security standards and industry best practices.
Perform security operations and maintenance using security tools.
Manage and assist with ongoing security monitoring of information systems, including regular qualitative information-security risk analysis.
Assess the impact of emerging threats and coordinate appropriate remedial actions with teams.
Evaluate and recommend information-security technologies and countermeasures against threats to information or privacy.
Design and implement dashboards and data visualizations for stakeholders, and escalate problems to the appropriate authority when needed.
Ensure disaster-recovery and emergency-operating procedures are in place and tested regularly.
Conduct risk analysis to identify critical operations and systems needed for continued business operations during a disruption.
Apply professional judgment in complex situations and manage multiple tasks, initiatives, and priorities effectively.
Develop and maintain network and data security capabilities used by the Information Security Operation team.
Drive development, ongoing tuning, and optimization of security-event monitoring and analysis application platforms.
Assist in establishing and supporting enterprise policies, processes, and standard service-level agreement levels.