SalariesSign in
AboutPrivacyTerms
Information Security Engineer
eTrepid

Information Security Engineer

United StatesRemoteFull-time
Posted Sep 25
Apply

Job Description

Job Overview:

As a member of the Information Security Program Team, the Information Security Engineer is responsible for participating in all aspects of planning, deploying, documenting, monitoring, & maintaining the layered security to protect the confidentiality, integrity, and availability within the corporate and client facing infrastructures. This position will focus on protecting system boundaries, keeping systems and infrastructure hardened against attacks and securing highly sensitive data, along with securing user and computer identities.

Key Responsibilities:

  • Perform engineering, tuning, and provide guidance of network security controls & hardening including IDS/IPS, Web Filtering, Cloud Technologies, Email/Spam, and Firewalls.
  • Perform engineering, tuning, and guidance to the Information Security Team for incident response & SIEM management.
  • Experienced in cloud security and compliance for Azure and AWS.
  • Manage and support Identity and Access Management.
  • Support the investigation and resolution of security incidents.
  • Perform Security User Awareness Training and Phishing campaigns.
  • Perform vulnerability management as well as support penetration testing and remediation.
  • Perform engineering, tuning, & provide guidance of mobile & endpoint security controls & hardening including AV, Endpoint Detection & Response, DLP, & encryption.
  • Translate security controls and requirements into system specification requirements.
  • Perform 3rd party vendor risk management assessments.
  • Plan, develop, and enhance security standards, requirements gathering, and engineer security solutions across the risk and technology portfolio.
  • Assist in designing computer security architecture and develop detailed cyber security designs.
  • Engineer, implement and monitor security measures for the protection of computer systems, storage, infrastructure, and cloud applications.
  • Define system security requirements, identify vulnerabilities, and coordinate remediation plans.
  • Support and coordinate risk assessments and security evaluations for vendors deploying solutions either on premise or in the cloud.
  • Participate in proof of concepts and other technical evaluations of technologies, designs and solutions and provide recommendations.
  • Plan and coordinate the deployment of security and vulnerability patching to all computer systems.
  • Prepare and document standard operating procedures and standards.
  • Develop technical solutions and select and implement new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
  • Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.
  • Plan/automate/deploy new infrastructure and security capabilities.
  • Participates in security awareness trainings, webinars, and podcasts designed as a Subject Matter Expert (SME).
  • Adept at Presenting in-person and virtual to customers, partners, and executives.

Eligibility Requirements:

  • BS degree in Computer Science, Information Systems or equivalent experience preferred.
  • CISSP certification required.
  • Industry certifications preferred: CISA, CISM, CEH, GIAC, or equivalent.
  • 8+ years of relevant experience focusing on security analysis.
  • 3+ years of experience performing Network Security with expertise configuring Firewalls, Network IDPS systems, Data-Loss Prevention (DLP), VPN, Proxy/Web content filtering, WAF, NAC, Zero-Trust, GRE/IPSec, and/or Network segmentation.
  • Experience managing and configuring Vulnerability Management tools, Cloud Security (including CASB & M365), Identity and Access Management tools, and/or Multi-Factor authentication
  • 3+ years of experience performing Endpoint Security with expertise configuring AV and/or MDR/EDR solutions, hardening Windows Server and Workstation OS, and/or MDM and Mobility.
  • Experience performing SIEM management and tuning, incident response, forensics, playbook development, and/or SOAR tools.
  • Ability to employ procedures, methods, and tools for identifying, representing, and formally assessing the important aspects of alternative decisions (options) to make an optimum (e.g. best possible) decision.
  • Experience with IT governance and/or risk.
  • Strong knowledge of network & infrastructure security architecture.
  • Experience working with Linux and Windows operating systems.
  • Experience with Microsoft Azure, IaaS, PaaS, SaaS, NaaS platforms
  • Detailed and thorough knowledge of incident analysis and response concepts and techniques, including incident tracking process, root cause, lessons learned and process improvements.
  • Knowledge of compliance standards and security frameworks (COBIT, NIST, HIPAA, ISO27001/2, OWASP, PCI)
  • Knowledge of security regulations, frameworks and security requirements that impact SMB market (GLBA, HIPAA, PCI, NIST 800-171, NIST 800-53, NIST -CSF, CMMC)
  • Excellent analytical and problem-solving skills with the ability to work under pressure.
  • High level of personal integrity, with the ability to professionally handle confidential matters while leveraging the appropriate level of judgment.
  • Strong interpersonal and communication skills.
  • Ability to work well under stressful environments.
  • Ability to work extended hours and weekends when required.

If you have an interest and meet these requirements, we encourage you to apply online!

  • Must be a United States citizen to Apply.

  • Ability to gain a security clearance.

  • EOE Principles only.

eTrepid is an Award-winning Veteran Owned Managed Security Service Provider (MSSP) located in and certified by the state of Maryland. We provide complete and comprehensive fully Managed Cyber Solutions that deliver on all five tenants of the NIST framework. eTrepid also remains on the forefront of industry changes such as regulations associated with the Cybersecurity Maturity Model Certification (CMMC).

The sun never sets on eTrepid, partnering with global leaders in IT enables our client systems to be monitored and serviced by seasoned and certified professionals in real time 24 hours a day, seven days a week, 365 days a year. We can even put boots on the ground in all 50 states.

Originally posted on Himalayas

View job

Cybersecurity Software Engineer

Meridian Bioscience

  • United States
  • Remote
Apply
Sep 25
View job
P

Cybersecurity Analyst

PurpleBox, Inc.

  • United States
  • Remote
  • Full-time
Apply
Sep 25
View job

Senior Software Engineer, Security Products

DigitalOcean

  • United States
  • Remote
  • Full-time
Apply
Sep 25
View job

Director of Cyber Security

EZCORP

  • United States
  • Remote
  • Full-time
Apply
Sep 25
View job

Information Security Analyst I

Camden National Bank

  • India
  • Remote
  • Full-time
Apply
Sep 25
View job

Security and Compliance Engineer

Genesis Consulting Partners, LLC

  • United States
  • Remote
  • Full-time
Apply
Sep 25
View job

Specialist Security Engineer Cybersecurity Engineering

Caesars Entertainment

  • United States
  • Remote
  • Full-time
Apply
Sep 25
View job

Group Security & Compliance Manager ($60,000/year USD), Sparkrock

Sparkrock

  • Argentina
  • Remote
  • Full-time
Apply
Sep 25
View job

Information Security Engineer

eTrepid

  • United States
  • Remote
  • Full-time
Apply
Sep 25
View job
A

IT Security Manager

Avento Group

  • Worldwide
  • Remote
  • Part-time
Apply
Sep 25
View job

Senior Product Security Engineer

AlphaSense

  • Ireland
  • Remote
  • Full-time
Apply
Sep 25
View job
C

GRC Engineer

Clerk

  • Remote
  • Full-time
Apply
Sep 25
View job

Threat Intelligence Data Engineer

HEROIC

  • India
  • Remote
  • Full-time
Apply
Sep 25
View job

SAP Basis Consultant and Security Consultant (8 Month)

Müller`s Solutions

  • United Arab Emirates
  • Remote
  • Full-time
Apply
Sep 25
View job

Senior Security Engineer

Incognia

  • Brazil
  • Remote
  • Full-time
Apply
Sep 25
View job

Senior Security Engineer - Threat Detection

Samsara

  • Canada
  • Remote
  • Full-time
Apply
Sep 25
View job

Principal Identity Engineer

Hard Rock Digital

  • Worldwide
  • Remote
  • Full-time
Apply
Sep 25
View job

Senior Product Security Engineer

AlphaSense

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 25
View job

Security GRC Analyst

Protective

  • United States
  • Remote
  • Full-time
Apply
Sep 24
View job

Information Security Compliance Coordinator

Contact Government Services

  • United States
  • Remote
  • Part-time
Apply
Sep 24
View job

AI and Cloud Security Analyst

TD SYNNEX

  • India
  • Remote
  • Full-time
Apply
Sep 24
View job

Sr Director Analyst, Cyber GRC Tools and Technology (Remote Europe)

Gartner

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 24
View job

Product Security Engineer

Action1

  • Serbia
  • Remote
  • Full-time
Apply
Sep 24
View job
S

Security Engineer - Detection and Response

Spotify

  • New York, NY
  • Remote
Apply
Sep 24
View job

Principal Data Engineer - Global Cybersecurity Data & Analytics

Liberty Mutual

  • United States
  • Remote
  • Full-time
Apply
Sep 24
View job

Sr. Manager, Security — Continuous Monitoring v 2.0

Databricks

  • United States
  • Remote
  • Full-time
Apply
Sep 24
View job

AI Software Engineer - Identity Recovery (Canada)

Quest Software

  • Canada
  • Remote
  • Full-time
Apply
Sep 24
View job

Platform Security Engineer (Tanium/Sentinel)

NCC Group

  • United Kingdom
  • Remote
  • Contract
Apply
Sep 24
View job

Cloud Security Operations Engineer (GCP/AWS) - Remote

Medable

  • United States
  • Remote
  • Full-time
Apply
Sep 24
View job

Staff Security Engineer, Proactive Security - Dasher

Doordash

  • United States
  • Remote
  • Full-time
Apply
Sep 24
PreviousPage 94 of 128Next
eTrepid

Information Security Engineer

United StatesRemoteFull-time
Posted Sep 25
Apply

Job Description

Job Overview:

As a member of the Information Security Program Team, the Information Security Engineer is responsible for participating in all aspects of planning, deploying, documenting, monitoring, & maintaining the layered security to protect the confidentiality, integrity, and availability within the corporate and client facing infrastructures. This position will focus on protecting system boundaries, keeping systems and infrastructure hardened against attacks and securing highly sensitive data, along with securing user and computer identities.

Key Responsibilities:

  • Perform engineering, tuning, and provide guidance of network security controls & hardening including IDS/IPS, Web Filtering, Cloud Technologies, Email/Spam, and Firewalls.
  • Perform engineering, tuning, and guidance to the Information Security Team for incident response & SIEM management.
  • Experienced in cloud security and compliance for Azure and AWS.
  • Manage and support Identity and Access Management.
  • Support the investigation and resolution of security incidents.
  • Perform Security User Awareness Training and Phishing campaigns.
  • Perform vulnerability management as well as support penetration testing and remediation.
  • Perform engineering, tuning, & provide guidance of mobile & endpoint security controls & hardening including AV, Endpoint Detection & Response, DLP, & encryption.
  • Translate security controls and requirements into system specification requirements.
  • Perform 3rd party vendor risk management assessments.
  • Plan, develop, and enhance security standards, requirements gathering, and engineer security solutions across the risk and technology portfolio.
  • Assist in designing computer security architecture and develop detailed cyber security designs.
  • Engineer, implement and monitor security measures for the protection of computer systems, storage, infrastructure, and cloud applications.
  • Define system security requirements, identify vulnerabilities, and coordinate remediation plans.
  • Support and coordinate risk assessments and security evaluations for vendors deploying solutions either on premise or in the cloud.
  • Participate in proof of concepts and other technical evaluations of technologies, designs and solutions and provide recommendations.
  • Plan and coordinate the deployment of security and vulnerability patching to all computer systems.
  • Prepare and document standard operating procedures and standards.
  • Develop technical solutions and select and implement new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
  • Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.
  • Plan/automate/deploy new infrastructure and security capabilities.
  • Participates in security awareness trainings, webinars, and podcasts designed as a Subject Matter Expert (SME).
  • Adept at Presenting in-person and virtual to customers, partners, and executives.

Eligibility Requirements:

  • BS degree in Computer Science, Information Systems or equivalent experience preferred.
  • CISSP certification required.
  • Industry certifications preferred: CISA, CISM, CEH, GIAC, or equivalent.
  • 8+ years of relevant experience focusing on security analysis.
  • 3+ years of experience performing Network Security with expertise configuring Firewalls, Network IDPS systems, Data-Loss Prevention (DLP), VPN, Proxy/Web content filtering, WAF, NAC, Zero-Trust, GRE/IPSec, and/or Network segmentation.
  • Experience managing and configuring Vulnerability Management tools, Cloud Security (including CASB & M365), Identity and Access Management tools, and/or Multi-Factor authentication
  • 3+ years of experience performing Endpoint Security with expertise configuring AV and/or MDR/EDR solutions, hardening Windows Server and Workstation OS, and/or MDM and Mobility.
  • Experience performing SIEM management and tuning, incident response, forensics, playbook development, and/or SOAR tools.
  • Ability to employ procedures, methods, and tools for identifying, representing, and formally assessing the important aspects of alternative decisions (options) to make an optimum (e.g. best possible) decision.
  • Experience with IT governance and/or risk.
  • Strong knowledge of network & infrastructure security architecture.
  • Experience working with Linux and Windows operating systems.
  • Experience with Microsoft Azure, IaaS, PaaS, SaaS, NaaS platforms
  • Detailed and thorough knowledge of incident analysis and response concepts and techniques, including incident tracking process, root cause, lessons learned and process improvements.
  • Knowledge of compliance standards and security frameworks (COBIT, NIST, HIPAA, ISO27001/2, OWASP, PCI)
  • Knowledge of security regulations, frameworks and security requirements that impact SMB market (GLBA, HIPAA, PCI, NIST 800-171, NIST 800-53, NIST -CSF, CMMC)
  • Excellent analytical and problem-solving skills with the ability to work under pressure.
  • High level of personal integrity, with the ability to professionally handle confidential matters while leveraging the appropriate level of judgment.
  • Strong interpersonal and communication skills.
  • Ability to work well under stressful environments.
  • Ability to work extended hours and weekends when required.

If you have an interest and meet these requirements, we encourage you to apply online!

  • Must be a United States citizen to Apply.

  • Ability to gain a security clearance.

  • EOE Principles only.

eTrepid is an Award-winning Veteran Owned Managed Security Service Provider (MSSP) located in and certified by the state of Maryland. We provide complete and comprehensive fully Managed Cyber Solutions that deliver on all five tenants of the NIST framework. eTrepid also remains on the forefront of industry changes such as regulations associated with the Cybersecurity Maturity Model Certification (CMMC).

The sun never sets on eTrepid, partnering with global leaders in IT enables our client systems to be monitored and serviced by seasoned and certified professionals in real time 24 hours a day, seven days a week, 365 days a year. We can even put boots on the ground in all 50 states.

Originally posted on Himalayas