Sr. SecOps Security Engineer - Bensalem, PA
About The Position
The Senior Security Engineer joins PFFCU’s Information Security team and reports to the Manager SecOps. The role designs, implements, and maintains security architectures that protect the organization’s network infrastructure from cyber threats. The engineer works with Information Systems staff to assess and reduce information security risk and support compliance with financial institution regulations. The position covers security monitoring and incident response, network and endpoint protection, vulnerability management, identity and access management, and secure network architecture. It also maintains security documentation and reports, collaborates with IT and compliance teams, and provides guidance on security best practices. Core hours are Monday through Friday, 8:00 AM to 4:00 PM; the role also includes a rotating after-hours support function and may require evening or weekend work and participation in an on-call rotation.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, or a related field.
- At least 5 years of hands-on information security engineering and administration experience.
- Demonstrated technical knowledge of perimeter security devices and configuration.
- Substantial experience with VMware and other virtualization technologies.
- Ability to assess problems and situations, with analytical ability and sound judgment.
- Effective business communication and technical writing skills.
- In-depth knowledge of financial institution regulations, including NCUA, GLBA, and PCI DSS.
- In-depth working knowledge of perimeter security technologies, including Splunk SIEM, ForcePoint web filtering, intrusion detection and prevention, network-based DLP, vulnerability scanners, zero-day platforms, endpoint technologies, IAM solutions, firewalls and NGFW, and NetFlow visibility.
- Working knowledge of security risk assessment methodology and vulnerability analysis, and strong knowledge of Splunk SIEM technology.
- Strong project skills, including the ability to complete projects with multi-month timeframes and handle multiple projects simultaneously.
- Experience working with a third-party service provider.
- Ability to think logically and visualize abstract concepts.
- Ability to prioritize multiple tasks and clearly communicate technical information to individuals at all organizational levels and vendors.
- Ability to work varying hours, including evenings and weekends, and participate in an on-call rotation.
Nice To Haves
- An advanced degree or certifications.
- Experience with ForcePoint Web Filter, Nessus, FireEye/Trellix zero-day technologies, email security technologies, Cisco Secure Workload, Cisco Identity Services Engine, Cisco AMP, Trellix or Microsoft Defender XDR, FireEye NX and CMS, Okta and RSA MFA, and StealthWatch.
Responsibilities
- Design, implement, and manage Splunk SIEM solutions for centralized security monitoring, threat detection, and incident response.
- Manage and monitor intrusion detection and prevention systems and respond to suspicious activity.
- Deploy and maintain network-based data loss prevention solutions and develop data privacy policies.
- Conduct vulnerability assessments using tools such as Nessus and support remediation.
- Deploy zero-day threat protection and develop response strategies.
- Manage endpoint protection technologies to guard against malware.
- Implement identity and access management solutions such as Okta and RSA.
- Architect and configure secure network solutions, including firewalls, next-generation firewalls, and web content filtering.
- Maintain security architecture documentation and generate regular security posture reports.
- Collaborate with IT and compliance teams and provide guidance on security best practices.
- Monitor and maintain network security appliances to protect system integrity from internal and external threats.
- Document current and future information security system configurations and changes in accordance with PFFCU change-control guidelines.
- Serve as a Tier 2 escalation contact, including rotating after-hours support.
- Build knowledge of PFFCU’s business and interface effectively with other IT teams and technology users.
- Manage multiple projects, maintain focus on projects with multi-month timeframes, and work with third-party service providers.
- Communicate technical information clearly to people at all organizational levels and to vendors.
- Prioritize multiple tasks and participate in an on-call rotation; work varying hours, including evenings and weekends when needed.
Benefits
- Medical, dental, and vision premiums covered at 75% to 90% by PFFCU.
- PFFCU automatic 401(k) contribution of 6% after one year, regardless of employee contribution.
- Paid time off.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
