Job Description

Design and architect security solutions for enterprise InfoSec Solutions.


Develop a Security Capabilities Catalog, emphasizing Core capabilities and Client product offerings.


Identify design/solution alternatives, standards, and guidelines.


Establish security reference architecture for Platform Delivery, Product Delivery, Infrastructure & PMO.


Contribute to formal, large-scale design reviews.


Develop confirmation models for InfoSec Services/Architecture analytical models; validate/confirm InfoSec Controls Effectiveness and Efficiency.


Create technical architecture ensuring proper interoperation and integration among existing and proposed systems.


Develop program quality metrics as program performance and enterprise risk indicators.


Perform installation and configuration management of security systems and applications.


Locate and repair security problems and failures.


Collate security incident and event data to produce monthly exception and management reports.


Report unresolved network security exposures, misuse of resources, or noncompliance situations using defined escalation processes.


Assess, design, implement, automate, and document customer solutions leveraging hybrid platforms and third-party solutions.


Demonstrate architectures, methods, and controls required to meet stringent compliance and audit requirements.


Proactively stay up to date with developments in relevant technologies.


Install and maintain Security Information and Event Management (SIEM), Intrusion Prevention Systems (IPS), Data Loss Prevention (DLP), and other security tools in a hybrid environment.


Respond to and, where appropriate, resolve or escalate reported security incidents.


Monitor system logs, SIEM tools, and network traffic for unusual or suspicious activity.


Train team members in the use of security tools and resolution of security issues.


Perform related duties as assigned by management.

Education and Experience

============================

Required education and experience. Examples below.

Bachelor's Degree in Computer Science, Engineering, or another relevant discipline; Master's Degree preferred.


8+ years of progressive experience in Cyber Security.


6+ years of system security and testing experience.


Relevant certifications (e.g., CISSP, SSCP, Offensive Security, CPT, CEH) are a plus.


Extensive experience as a Cyber Security Network Engineer.


Experience in developing, documenting, and maintaining security procedures.


Experience with NextGen Firewalls, DLP, Network Access Control (NAC), Intrusion Detection/Prevention Systems (IDS/IPS), Azure Security, Identity and Access Management (IdAM), Certificate Management, SIEM, Endpoint Protection, Anti-malware, Vulnerability Management, Zero Trust.


Advanced InfoSec Design and Architecture Experience.


Experienced in Data security, Infrastructure security, Endpoint/Platform Security, Security Analytics, and Application Security.


Working experience with industry frameworks (NIST, ISO, CIS, etc.).

Knowledge, Skills, and Abilities

====================================

Required knowledge, skills, and ability. Examples below.

Knowledge of computer control environments.


Strong knowledge of a broad range of security technologies.


Strong knowledge of network security, wireless security, application security, infrastructure hardening, security baselines, web server, and database security.


Knowledge of network infrastructure, routers, switches, firewalls, and associated protocols.


Strong knowledge of TCP/IP and network administration/protocols.


Significant exposure and experience in the implementation and operation of InfoSec Products and Services.


High-level analytical and problem-solving skills.


Financial management and estimation of technology impact experience.


Strong technical and business requirements integration skills.


Executive-level communication and presentation skills.


Knowledge of automation strategies and tools.


Knowledge of security auditing techniques.


Comfortable working outside their comfort zone with a willingness to learn.