Sr Engineer, Cybersecurity

Spire Inc.•St. Louis, MO

2d•Hybrid

About The Position

Spire is seeking a Cybersecurity Engineer, Sr. This position will be responsible for protecting the confidentiality and integrity of customer, employee and business information in compliance with organization policies and standards while participating directly in the planning, development, implementation and expansion of security technologies throughout the company. The selected candidate must effectively drive IT security actions with the team across the organization, perform cyber security threat impact assessments and prepare assessment reports, and analyze cyber security discovery information; to include determining requirements and remediations while coordinating with various vendors and business stakeholders.

Requirements

Ability to demonstrate and master the core and job category competencies
Ability to lead by example in support of the Company’s essential characteristics and values
Ability to work under pressure, respond to incidents, and meet deadlines in a fast-paced environment
Strong interpersonal skills with proven ability to establish rapport with a diverse array of people
Ability to communicate technical concepts clearly to both technical and non-technical stakeholders
A Bachelor’s degree in Information Technology, Computer Science, Engineering, and/or equivalent experience in Information Systems
Security+, CISSP, CCNA or equivalent certification/degree.
Experience with SIEM tools, O365 security, endpoint protection, and email security control (required)
Five years of experience in the Cybersecurity function (required)
Advanced knowledge of cybersecurity frameworks (NIST, ISO, CIS) and enterprise security architecture
Strong analytical capabilities, demonstrated knowledge and understanding of security technologies
Solid understanding of security best practices
General understanding of Information Technology, such as TCP/IP fundamentals, Web protocols (HTTPS), modifying system parameters, understanding network security, risk and threat prevention
Strong expertise in network and system security (enterprise firewall platforms and enterprise operating systems)
Solid understanding of vulnerability management, penetration testing, threat intelligence, and incident response
Proven ability to analyze cyber risks, conduct impact assessments, and produce clear documentation/reporting
Skill in evaluating, testing, and implementing security technologies and controls
Proficiency in scripting (PowerShell, Python, Bash) for automation and security operations
Experience performing third-party/vendor security assessments and coordinating remediation efforts
Ability to lead cybersecurity initiatives and drive cross-functional collaboration
Strong analytical, problem-solving, and organizational skills with ability to manage multiple priorities

Responsibilities

Participate in regular status meetings
Ensure events are properly documented for network security and cybersecurity stakeholders
Responsible for providing analysis and documentation of IT risk processes
Conducts pre-production testing and reviews of proposed security changes
Oversees identification and reporting of potential impacts of problems
Conducts testing and reviews of security changes to ensure compliance with IT Security controls
Work with vendors to perform assessments, understand security functionality and implementation
Stays current on common and emerging security standards and frameworks
Apply advance security knowledge working in the following areas: CISCO ASA Firewall/Palo Alto Firewalls Windows/Linux/Oracle OS Security Best Practices SIEM, O365 Suite, Antivirus Tools, Email Security, Scripting skills, 3rd Party Vendor Assessments Monitoring, Incident Response, Threat Intelligence, Pen Testing, Vulnerability Assessments, Technology evaluation
All other duties as assigned or requested