Sr System Security Engineer - EIA ITICPS

ASM Research

28d

About The Position

In this role, the Sr. System Security Engineer will be the hands-on and the sole System Security Engineer which demands a self-motivated and highly proactive individual capable of proactively ensuring and maintaining system and security integrity of client systems by engaging and driving efforts forward in an independent manner. safeguarding the client’s critical systems and infrastructure by spearheading the design, implementation, and management of comprehensive security strategies. Leverage deep technical expertise to build and secure robust systems that protect against evolving threats. Development of security solutions. Ensure the hardening of network, Linux-based, and Windows system. Diagnose complex security issues and deliver timely, effective solutions. Secure cloud environments such as AWS, Azure, or GCP, as well as containerized platforms like Docker and Kubernetes, and ensure that all systems meet DISA-STIG security standards. Work directly with other security team members in ensuring up time and compliance of the various security tools and processes. Diagnose complex security issues and deliver robust, timely solutions. Effectively report security findings, communicate risk, and collaborate with diverse teams and leadership. Designs, develops or recommends integrated system solutions ensuring proprietary/confidential data and systems are protected.

Requirements

Bachelor’s Degree in Computer Science, Engineering, or other Engineering or Technical discipline or equivalent relevant experience. Master’s Degree preferred.
12+ years of experience as an Application Security Developer, Application Security Analyst, or equivalent.
Excellent verbal and written communication skills.
Deep, hands-on experience with Linux operating systems (e.g., RHEL, CentOS, Ubuntu), including system internals, administration, Linux template hardening, and troubleshooting.
Hands-on Microsoft Windows knowledge such as Active Directory Security, System Hardening & Configuration, Windows Security Stack, and Logging and Monitoring (Windows Event Logs, Sysmon, and integration with SIEM systems for threat detection).
Hands-on experience with Infrastructure Hardening and Configuration of on premise and cloud based servers, network devices, and hypervisors. Includes engineering and maintenance of secure networks through use of firewalls, VLAN segmentation, and ACLs configuration.
Advanced proficiency in scripting languages such as Python and Bash to automate tasks and build security tools.
Experience securing cloud environments (e.g., AWS, Azure, GCP) and containerization technologies like Docker and Kubernetes.
Strong understanding of network security, protocols (TCP/IP), firewalls, encryption, and authentication systems.
Proficiency with industry-standard security frameworks like the PCI-DSS, SOC 2, NIST, ISO etc.
Proficiency with tools for vulnerability scanning (Tenable Nessus), network tools (Cisco FMC, Extrahop,etc) , SIEM (Splunk), EDR (Trellix) and other various toolsets.

Nice To Haves

Master’s Degree preferred.

Responsibilities

safeguarding the client’s critical systems and infrastructure by spearheading the design, implementation, and management of comprehensive security strategies.
Leverage deep technical expertise to build and secure robust systems that protect against evolving threats.
Development of security solutions.
Ensure the hardening of network, Linux-based, and Windows system.
Diagnose complex security issues and deliver timely, effective solutions.
Secure cloud environments such as AWS, Azure, or GCP, as well as containerized platforms like Docker and Kubernetes, and ensure that all systems meet DISA-STIG security standards.
Work directly with other security team members in ensuring up time and compliance of the various security tools and processes.
Diagnose complex security issues and deliver robust, timely solutions.
Effectively report security findings, communicate risk, and collaborate with diverse teams and leadership.
Designs, develops or recommends integrated system solutions ensuring proprietary/confidential data and systems are protected.