Security Engineer

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Overview: We are seeking a talented and experienced Security Engineer to join our team. As a Security Engineer, you will play a crucial role in fortifying our systems, networks, and data against cybersecurity threats. Your primary responsibility will be designing, implementing, and maintaining security solutions to uphold the integrity of our organization's assets.

Responsibilities:

Security Infrastructure Design and Implementation:

• Collaborate with stakeholders to design and implement robust security infrastructure solutions.
• Deploy and maintain security tools and technologies to detect and prevent cyber threats.
• Conduct security assessments and penetration tests to identify vulnerabilities and recommend remediation actions.
  
  
  

Identity and Access Management:

• Architect and build IAM infrastructure components, including identity management systems, directory services, authentication mechanisms, and access control mechanisms.
• Develop secure IAM frameworks and workflows, ensuring scalability, reliability, and high availability of IAM infrastructure.
• Implement role-based access control (RBAC) frameworks and access control models to grant appropriate access privileges to users based on their roles and responsibilities.
  
  
  

Automation for Building and Maintaining Infrastructure:

• Implement automation tools and scripts to streamline the building and maintenance of security infrastructure.
• Develop automated workflows for provisioning and configuring security controls across systems and networks.
• Utilize Infrastructure as Code (IaC) principles to automate the deployment and configuration of security-related resources.
  
  
  

Patching Infrastructure Management:

• Manage and maintain patching infrastructure owned by the Cyber Fusion Center.
• Coordinate and execute patch management activities across all systems and networks, ensuring timely deployment of security patches and updates.
• Develop and implement patching policies and procedures to minimize security risks and vulnerabilities.
  
  
  

Security Monitoring and Analysis:

• Monitor security events and alerts to identify suspicious activities and potential threats.
• Perform log analysis and security incident investigations to determine the scope and impact of security incidents.
• Develop and maintain security monitoring tools and dashboards to enhance threat detection capabilities.
  
  
  

Security Policy and Compliance:

• Assist in the development and enforcement of security policies, standards, and procedures.
• Conduct security assessments and audits to ensure compliance with regulatory requirements and industry standards.
• Provide guidance and support to ensure that security controls are implemented effectively across the organization.
  
  
  

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Relevant certifications such as CISSP, CEH, or CompTIA Security+ are preferred.
• Proven experience in cybersecurity roles, with a focus on security infrastructure design, patch management, and security monitoring.
• Strong knowledge of cybersecurity principles, best practices, and industry standards.
• Proficiency in security tools and technologies, including SIEM solutions, patch management systems, and endpoint security controls.
• Excellent analytical and problem-solving skills, with the ability to assess complex security issues and propose effective solutions.
• Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and stakeholders.
• Ability to work independently and manage multiple tasks simultaneously in a fast-paced environment.