Senior Security Engineer

J.E. Dunn Construction Group Inc P•Kansas City, MO

33d

About The Position

The Senior Security Engineer will design, install, manage, document, and maintain enterprise security systems and standards across commonly used platforms (e.g. cloud, on-premises), ensuring end-user experience is supported through collaboration across other Information Technology functions. This role will provide specifications, analyze and recommend solutions, and suggest new products and services, delivering results through varied high-impact projects. All activities will be performed in support of the strategy, vision and values of JE Dunn.

Requirements

Ability to perform work accurately and completely, and in a timely manner
Communication skills, verbal and written – Intermediate
Ability to lead technical projects once assigned
Working knowledge of NIST cyber security framework, defense federal acquisition regulation supplement, and ISO 270XX
Ability to solve technical issues - Advanced
Demonstrated expert knowledge of information security practices
Substantial knowledge of Python and Powershell scripting languages
Proficient with multiple IT platforms including Microsoft Windows, Linux, iOS, Cisco Networking, Cisco firewalls, intrusion detection and load balancers
Proficient with multiple cloud platforms
Technical writing and documentation skills
Organizational skills
Ability to quickly and effectively solve complex problems
Ability to deliver quality through attention to detail
Ability to work in team and independently
Ability to work a flexible schedule – might be on call in the evenings and weekends
Ability to build relationships and collaborate within a team, internally and externally
5+ Years information security experience (Preferred)

Nice To Haves

Bachelor’s degree in information security or related field (Preferred)
In lieu of the above requirements, equivalent relevant experience will be considered

Responsibilities

Acts as escalation contact and subject matter expert for security operations and information technology team in relation to security solutions and practices.
Mentors team members on technical and security methodology characteristics.
Continuously improving the security program with automation and orchestration scripting for security operations efficiency and effectiveness.
Acts as primary technical resource for design and implementation projects.
Drafts and recommends operating procedures and changes to information security practices and solutions.
Trains and engages operations and support personnel on security solutions.
Advise on trends, threats, and emerging security risks, relevant to the organization.
Engineer effective solutions that securely enable and protect in alignment with our organization compliance requirements.
May be a subject matter expert for a variety of security related systems or applications.
Communicates with operational groups for collaboration of security program management.
Advocates secure culture and provides education throughout the appropriate client group.
Improves maturity capability of processes, procedures, and operations of the security program.
Communicates intelligence and program effectiveness reports to supervision.
Designs and implements security solutions for various platforms
Conducts comprehensive security assessments and audits to determine the effectiveness of security controls
Assists operations as needed in incident response and contribute to post-incident analysis
Develops and implements security policies, procedures, and configuration standards to meet regulatory and client security requirements
Reviews the Governance, Risk, and Compliance platform to determine any opportunities to lower security risk level
Implements and maintains access control system for any type of new enhancement opportunities
Collaborates with development teams to ensure secure software development practices
Monitors and analyzes security events and logs to make sure backend and correlation are implemented and working
Designs and implements robust security ensuring alignment with industry best practices and organization configurations
Deploys and helps maintain a secure cloud infrastructure and security controls. This includes network security, security monitoring, data protection, and compliance configuration
May assist the Security Architect in conducting threat modeling and risk assessments for new projects and cloud initiatives, identifying and mitigating potential security risks
Builds security automation scripts and tools to streamline security operations and improve efficiency
Works closely with cross-functional teams to provide security guidance and best practices, ensuring security is embedded in the project lifecycle
Plays an active role in contributing ideas for security innovations
Assists in the design and execution of incident response as it pertains to security engineering
Ensures compliance with security frameworks and regulations by engineering and implementing new security controls to address gaps in the security program
Implements security technologies with full understanding on accountability and ownership for full deployment