GRC Analyst

Founded over 35 years ago, First Quality is a family-owned company that has grown from a small business in McElhattan, Pennsylvania into a group of companies, employing over 5,000 team members, while maintaining our family values and entrepreneurial spirit. With corporate offices in New York and Pennsylvania and 8 manufacturing campuses across the U.S. and Canada, the companies within the First Quality group produce high-quality personal care and household products for large retailers and healthcare organizations. Our personal care and household product portfolio includes baby diapers, wipes, feminine pads, paper towels, bath tissue, adult incontinence products, laundry detergents, fabric finishers, and dishwash solutions. In addition, we manufacture certain raw materials and components used in the manufacturing of these products, including flexible print and packaging solutions.

Guided by our values of humility, unity, and integrity, we leverage advanced technology and innovation to drive growth and create new opportunities. At First Quality, you’ll find a collaborative environment focused on continuous learning, professional development, and our mission to Make Things Better®.

We are seeking an Information Security Engineer for our First Quality Tissue Enterprises, LLC, working remotelyin the Eastern Time Zone. This position provides leadership as well as in-depth expertise in all security aspects surrounding the implementation and operation of Information Technology solutions to improve the ability of the organization to protect the confidentiality, availability, and integrity of its information assets.

Primary responsibilities include:

Be or become the lead SME for various security tools including CASB, the Vulnerability Scanning Suite, EPP, etc to maintain and improve the functionality of our security tools.
Lead vulnerability management program working closely with the patching team to limit the vulnerability attack surface.
Provide technical engineering security expertise for company-wide projects, implementing security standards and baselines, and researching advancements in all security technologies that would benefit secure business growth.
Investigate, recommend, and assist with implementing security solutions that provide detection, prevention, containment, and deterrence mechanisms to protect and maintain the integrity of data and network resources.
Define security product requirements, conduct research, evaluation, testing, configuration, and implementation, to include identify management, access control, and intrusion prevention solutions.
Ensure guiding procedures for incident response are in place, effective and up to date, to include periodic computer incident response team (CIRT) activation to validate response procedures.
Use process management tools to track information about security systems administration requests and security events.
Track, generate and provide effective reporting for use by system administrators, business leadership and end-users; recommends and implements an effective event correlation solution that analyses the output from these and other security tools in a cost-effective manner.
Author security system and application processes for both operation and management, including as-build service configuration documents.
This role requires the ability to travel up to 10% annually.

The ideal candidate should possess the following:

Minimum 2 years of experience running security solutions on network/security engineering/security operations.
Knowledge of IT security controls - firewalls, SIEM platforms, NAC, CASB, DLP, IPS/IDS, encryption, authentication, tokenization, XDR/EDR tools and desktop virtualization security.
Working knowledge of the following technologies: Microsoft OS for Workstations/Servers , UNIX, firewall multi-layer design and implementation,, WANs, LANs, internet, intranets and network protocols (i.e., VPN, TLS, SSH, SFTP, TCP/IP, etc.), security assessment tools, vulnerability scanners, intrusion prevention systems, VMware, VDI, encryption, public key infrastructure (PKI).
Experience with cloud security solutions.
Experience working with Palo Alto Firewalls Suite (certification highly preferred).
Broad knowledge of network security practices, designs, methodologies, tools, and processes.
Comprehensive knowledge of network architectures, equipment, and designs.
Knowledge of vulnerability scanners and how to successfully implement and maintain an enterprise patching program.
Security risk assessment skills.
Working knowledge of information security related technologies and product.
Bachelors’ Degree or Equivalent Experience in Computer Science, EE, Data Network Security Architecture and Design.
Proven abilities to analyze security risks, provide remediation recommendations and create comprehensive security documentation.

What We Offer You

We believe that by continuously improving the quality of our benefits, we can help to raise the quality of life for our team members and their families. At First Quality you will receive:

Competitive base salary and bonus opportunities
Paid time off (three-week minimum)
Medical, dental and vision starting day one
401(k) with employer match
Paid parental leave
Child and family care assistance (dependent care FSA with employer match up to $2500)
Bundle of joy benefit (years’ worth of free diapers to all team members with a new baby)
Tuition assistance
Wellness program with savings of up to $4,000 per year on insurance premiums
...and more!

First Quality is committed to protecting information under the care of First Quality Enterprises commensurate with leading industry standards and applicable regulations. As such, First Quality provides at least annual training regarding data privacy and security to employees who, as a result of their role specifications, may come in to contact with sensitive data.

First Quality is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, sexual orientation, gender identification, or protected Veteran status.

Originally posted on Himalayas

Job Description

Primary responsibilities include:

Be or become the lead SME for various security tools including CASB, the Vulnerability Scanning Suite, EPP, etc to maintain and improve the functionality of our security tools.
Lead vulnerability management program working closely with the patching team to limit the vulnerability attack surface.
Provide technical engineering security expertise for company-wide projects, implementing security standards and baselines, and researching advancements in all security technologies that would benefit secure business growth.
Investigate, recommend, and assist with implementing security solutions that provide detection, prevention, containment, and deterrence mechanisms to protect and maintain the integrity of data and network resources.
Define security product requirements, conduct research, evaluation, testing, configuration, and implementation, to include identify management, access control, and intrusion prevention solutions.
Ensure guiding procedures for incident response are in place, effective and up to date, to include periodic computer incident response team (CIRT) activation to validate response procedures.
Use process management tools to track information about security systems administration requests and security events.
Track, generate and provide effective reporting for use by system administrators, business leadership and end-users; recommends and implements an effective event correlation solution that analyses the output from these and other security tools in a cost-effective manner.
Author security system and application processes for both operation and management, including as-build service configuration documents.
This role requires the ability to travel up to 10% annually.

The ideal candidate should possess the following:

Minimum 2 years of experience running security solutions on network/security engineering/security operations.
Knowledge of IT security controls - firewalls, SIEM platforms, NAC, CASB, DLP, IPS/IDS, encryption, authentication, tokenization, XDR/EDR tools and desktop virtualization security.
Working knowledge of the following technologies: Microsoft OS for Workstations/Servers , UNIX, firewall multi-layer design and implementation,, WANs, LANs, internet, intranets and network protocols (i.e., VPN, TLS, SSH, SFTP, TCP/IP, etc.), security assessment tools, vulnerability scanners, intrusion prevention systems, VMware, VDI, encryption, public key infrastructure (PKI).
Experience with cloud security solutions.
Experience working with Palo Alto Firewalls Suite (certification highly preferred).
Broad knowledge of network security practices, designs, methodologies, tools, and processes.
Comprehensive knowledge of network architectures, equipment, and designs.
Knowledge of vulnerability scanners and how to successfully implement and maintain an enterprise patching program.
Security risk assessment skills.
Working knowledge of information security related technologies and product.
Bachelors’ Degree or Equivalent Experience in Computer Science, EE, Data Network Security Architecture and Design.
Proven abilities to analyze security risks, provide remediation recommendations and create comprehensive security documentation.

What We Offer You

We believe that by continuously improving the quality of our benefits, we can help to raise the quality of life for our team members and their families. At First Quality you will receive:

Competitive base salary and bonus opportunities
Paid time off (three-week minimum)
Medical, dental and vision starting day one
401(k) with employer match
Paid parental leave
Child and family care assistance (dependent care FSA with employer match up to $2500)
Bundle of joy benefit (years’ worth of free diapers to all team members with a new baby)
Tuition assistance
Wellness program with savings of up to $4,000 per year on insurance premiums
...and more!

Originally posted on Himalayas

Job Description

Primary responsibilities include:

Be or become the lead SME for various security tools including CASB, the Vulnerability Scanning Suite, EPP, etc to maintain and improve the functionality of our security tools.
Lead vulnerability management program working closely with the patching team to limit the vulnerability attack surface.
Provide technical engineering security expertise for company-wide projects, implementing security standards and baselines, and researching advancements in all security technologies that would benefit secure business growth.
Investigate, recommend, and assist with implementing security solutions that provide detection, prevention, containment, and deterrence mechanisms to protect and maintain the integrity of data and network resources.
Define security product requirements, conduct research, evaluation, testing, configuration, and implementation, to include identify management, access control, and intrusion prevention solutions.
Ensure guiding procedures for incident response are in place, effective and up to date, to include periodic computer incident response team (CIRT) activation to validate response procedures.
Use process management tools to track information about security systems administration requests and security events.
Track, generate and provide effective reporting for use by system administrators, business leadership and end-users; recommends and implements an effective event correlation solution that analyses the output from these and other security tools in a cost-effective manner.
Author security system and application processes for both operation and management, including as-build service configuration documents.
This role requires the ability to travel up to 10% annually.

The ideal candidate should possess the following:

Minimum 2 years of experience running security solutions on network/security engineering/security operations.
Knowledge of IT security controls - firewalls, SIEM platforms, NAC, CASB, DLP, IPS/IDS, encryption, authentication, tokenization, XDR/EDR tools and desktop virtualization security.
Working knowledge of the following technologies: Microsoft OS for Workstations/Servers , UNIX, firewall multi-layer design and implementation,, WANs, LANs, internet, intranets and network protocols (i.e., VPN, TLS, SSH, SFTP, TCP/IP, etc.), security assessment tools, vulnerability scanners, intrusion prevention systems, VMware, VDI, encryption, public key infrastructure (PKI).
Experience with cloud security solutions.
Experience working with Palo Alto Firewalls Suite (certification highly preferred).
Broad knowledge of network security practices, designs, methodologies, tools, and processes.
Comprehensive knowledge of network architectures, equipment, and designs.
Knowledge of vulnerability scanners and how to successfully implement and maintain an enterprise patching program.
Security risk assessment skills.
Working knowledge of information security related technologies and product.
Bachelors’ Degree or Equivalent Experience in Computer Science, EE, Data Network Security Architecture and Design.
Proven abilities to analyze security risks, provide remediation recommendations and create comprehensive security documentation.

What We Offer You

We believe that by continuously improving the quality of our benefits, we can help to raise the quality of life for our team members and their families. At First Quality you will receive:

Competitive base salary and bonus opportunities
Paid time off (three-week minimum)
Medical, dental and vision starting day one
401(k) with employer match
Paid parental leave
Child and family care assistance (dependent care FSA with employer match up to $2500)
Bundle of joy benefit (years’ worth of free diapers to all team members with a new baby)
Tuition assistance
Wellness program with savings of up to $4,000 per year on insurance premiums
...and more!

Originally posted on Himalayas

Job Description

Primary responsibilities include:

Be or become the lead SME for various security tools including CASB, the Vulnerability Scanning Suite, EPP, etc to maintain and improve the functionality of our security tools.
Lead vulnerability management program working closely with the patching team to limit the vulnerability attack surface.
Provide technical engineering security expertise for company-wide projects, implementing security standards and baselines, and researching advancements in all security technologies that would benefit secure business growth.
Investigate, recommend, and assist with implementing security solutions that provide detection, prevention, containment, and deterrence mechanisms to protect and maintain the integrity of data and network resources.
Define security product requirements, conduct research, evaluation, testing, configuration, and implementation, to include identify management, access control, and intrusion prevention solutions.
Ensure guiding procedures for incident response are in place, effective and up to date, to include periodic computer incident response team (CIRT) activation to validate response procedures.
Use process management tools to track information about security systems administration requests and security events.
Track, generate and provide effective reporting for use by system administrators, business leadership and end-users; recommends and implements an effective event correlation solution that analyses the output from these and other security tools in a cost-effective manner.
Author security system and application processes for both operation and management, including as-build service configuration documents.
This role requires the ability to travel up to 10% annually.

The ideal candidate should possess the following:

Minimum 2 years of experience running security solutions on network/security engineering/security operations.
Knowledge of IT security controls - firewalls, SIEM platforms, NAC, CASB, DLP, IPS/IDS, encryption, authentication, tokenization, XDR/EDR tools and desktop virtualization security.
Working knowledge of the following technologies: Microsoft OS for Workstations/Servers , UNIX, firewall multi-layer design and implementation,, WANs, LANs, internet, intranets and network protocols (i.e., VPN, TLS, SSH, SFTP, TCP/IP, etc.), security assessment tools, vulnerability scanners, intrusion prevention systems, VMware, VDI, encryption, public key infrastructure (PKI).
Experience with cloud security solutions.
Experience working with Palo Alto Firewalls Suite (certification highly preferred).
Broad knowledge of network security practices, designs, methodologies, tools, and processes.
Comprehensive knowledge of network architectures, equipment, and designs.
Knowledge of vulnerability scanners and how to successfully implement and maintain an enterprise patching program.
Security risk assessment skills.
Working knowledge of information security related technologies and product.
Bachelors’ Degree or Equivalent Experience in Computer Science, EE, Data Network Security Architecture and Design.
Proven abilities to analyze security risks, provide remediation recommendations and create comprehensive security documentation.

What We Offer You

We believe that by continuously improving the quality of our benefits, we can help to raise the quality of life for our team members and their families. At First Quality you will receive:

Competitive base salary and bonus opportunities
Paid time off (three-week minimum)
Medical, dental and vision starting day one
401(k) with employer match
Paid parental leave
Child and family care assistance (dependent care FSA with employer match up to $2500)
Bundle of joy benefit (years’ worth of free diapers to all team members with a new baby)
Tuition assistance
Wellness program with savings of up to $4,000 per year on insurance premiums
...and more!

Originally posted on Himalayas