Principal Information Security Engineer

Ascensus is the leading independent technology and service platform powering savings plans across America, providing products and expertise that help nearly 16 million people save for a better today and tomorrow.

Section 1: Position Summary

The Principal Security Ops Analyst will be responsible for operational security responsibilities across Ascensus.

Section 2: Job Functions, Essential Duties and Responsibilities

Accountability for team’s effectiveness and success
Establish cross-training within team for availability of SecOps functions
Security Event Monitoring & Response
- Monitor security events from all tool sources
- Analyze events filtering for false positives
- Understanding of basic network services, vulnerabilities and attacks
- Incident response process and escalation of events
- Work with the security team to enhance and build new processes & procedures
- Contribute to and maintain documented processes around monitoring & response
- Work closely with information security, IT, risk & governance, and facilities teams.
- Report on security operations metrics quarterly
- Process phishing email escalations from Associates
- Correlate events with other known social engineering attempts
Management of Security Solutions
- Build, manage and maintain tools including, but not limited to:
  - IAM
  - IPS
  - SEIM
  - Web Application Firewall
  - Anti-Virus, Malware and Endpoint Protection
  - CASB
  - UBA
  - DLP
  - Web Proxy/Web content filtering
  - Vulnerability management
  - File integrity monitoring
  - Network Access Control (NAC)
- Maintain documentation around tools
- Champion the information security tool’s usage to maximize features
- Review access requests around content filtering, removable media and exceptions
Work collaboratively with the various technology teams to accomplish security objectives
Additional security experience may be gained depending on associate’s level of interest and availability:
- Assessing and selecting security vendors or solutions
- Identify emerging vulnerabilities and evaluate associated risks
- Assisting in corporate incident response events
  - Security testing (vulnerability scans, aspects of ethical hacking/penetration testing)
  - Detailed configuration reviews
Responsible for protecting, securing, and proper handling of all confidential data held by Ascensus to ensure against unauthorized access, improper transmission, and/or unapproved disclosure of information that could result in harm to Ascensus or our clients.
Our I-Client service philosophy and our Core Values of People Matter, Quality First and Integrity Always® should be visible in your actions on a day to day basis showing your support of our organizational culture.
Assist with other tasks and projects as assigned

Section 3: Experience, Skills, Knowledge Requirements

Experience managing security tools noted above
Experience with monitoring, detecting, and responding activities
Knowledge of information security risks, at least technical aspects including working knowledge around remediation.
Ability to lead, inspire and motivate associates on the team
Ability to objectively review the team’s work, implement enhancements and monitor quality
Strong written and oral communication skills. The ability to communicate effectively (clear, concise and professionally) with all levels within Ascensus.
Highly organized and able to process and manage inventories of controls and findings.
Excellent analytical and problem resolution skills.
Self-starter and able to work independently.
Persistence and strength to champion initiatives.

Minimum Requirements:

A minimum of 5 years’ experience in Information Security or Security Operations
Knowledge of networking preferred.
Expert level proficiency in MS Office software applications, specifically Word, Excel and Power Point
Bachelor’s degree plus equivalent work experience required.
CISSP certification preferred.

We are proud to be an Equal Opportunity Employer

Be aware of employment fraud. All email communications from Ascensus or its hiring managers originate from @ascensus.com or @futureplan.comemail addresses. We will never ask you for payment or require you to purchase any equipment. If you are suspicious or unsure about validity of a job posting, we strongly encourage you to apply directly through our website.

Originally posted on Himalayas

Job Description

Section 1: Position Summary

The Principal Security Ops Analyst will be responsible for operational security responsibilities across Ascensus.

Section 2: Job Functions, Essential Duties and Responsibilities

Accountability for team’s effectiveness and success
Establish cross-training within team for availability of SecOps functions
Security Event Monitoring & Response
- Monitor security events from all tool sources
- Analyze events filtering for false positives
- Understanding of basic network services, vulnerabilities and attacks
- Incident response process and escalation of events
- Work with the security team to enhance and build new processes & procedures
- Contribute to and maintain documented processes around monitoring & response
- Work closely with information security, IT, risk & governance, and facilities teams.
- Report on security operations metrics quarterly
- Process phishing email escalations from Associates
- Correlate events with other known social engineering attempts
Management of Security Solutions
- Build, manage and maintain tools including, but not limited to:
  - IAM
  - IPS
  - SEIM
  - Web Application Firewall
  - Anti-Virus, Malware and Endpoint Protection
  - CASB
  - UBA
  - DLP
  - Web Proxy/Web content filtering
  - Vulnerability management
  - File integrity monitoring
  - Network Access Control (NAC)
- Maintain documentation around tools
- Champion the information security tool’s usage to maximize features
- Review access requests around content filtering, removable media and exceptions
Work collaboratively with the various technology teams to accomplish security objectives
Additional security experience may be gained depending on associate’s level of interest and availability:
- Assessing and selecting security vendors or solutions
- Identify emerging vulnerabilities and evaluate associated risks
- Assisting in corporate incident response events
  - Security testing (vulnerability scans, aspects of ethical hacking/penetration testing)
  - Detailed configuration reviews
Responsible for protecting, securing, and proper handling of all confidential data held by Ascensus to ensure against unauthorized access, improper transmission, and/or unapproved disclosure of information that could result in harm to Ascensus or our clients.
Our I-Client service philosophy and our Core Values of People Matter, Quality First and Integrity Always® should be visible in your actions on a day to day basis showing your support of our organizational culture.
Assist with other tasks and projects as assigned

Section 3: Experience, Skills, Knowledge Requirements

Experience managing security tools noted above
Experience with monitoring, detecting, and responding activities
Knowledge of information security risks, at least technical aspects including working knowledge around remediation.
Ability to lead, inspire and motivate associates on the team
Ability to objectively review the team’s work, implement enhancements and monitor quality
Strong written and oral communication skills. The ability to communicate effectively (clear, concise and professionally) with all levels within Ascensus.
Highly organized and able to process and manage inventories of controls and findings.
Excellent analytical and problem resolution skills.
Self-starter and able to work independently.
Persistence and strength to champion initiatives.

Minimum Requirements:

A minimum of 5 years’ experience in Information Security or Security Operations
Knowledge of networking preferred.
Expert level proficiency in MS Office software applications, specifically Word, Excel and Power Point
Bachelor’s degree plus equivalent work experience required.
CISSP certification preferred.

We are proud to be an Equal Opportunity Employer

Originally posted on Himalayas

Job Description

Section 1: Position Summary

The Principal Security Ops Analyst will be responsible for operational security responsibilities across Ascensus.

Section 2: Job Functions, Essential Duties and Responsibilities

Accountability for team’s effectiveness and success
Establish cross-training within team for availability of SecOps functions
Security Event Monitoring & Response
- Monitor security events from all tool sources
- Analyze events filtering for false positives
- Understanding of basic network services, vulnerabilities and attacks
- Incident response process and escalation of events
- Work with the security team to enhance and build new processes & procedures
- Contribute to and maintain documented processes around monitoring & response
- Work closely with information security, IT, risk & governance, and facilities teams.
- Report on security operations metrics quarterly
- Process phishing email escalations from Associates
- Correlate events with other known social engineering attempts
Management of Security Solutions
- Build, manage and maintain tools including, but not limited to:
  - IAM
  - IPS
  - SEIM
  - Web Application Firewall
  - Anti-Virus, Malware and Endpoint Protection
  - CASB
  - UBA
  - DLP
  - Web Proxy/Web content filtering
  - Vulnerability management
  - File integrity monitoring
  - Network Access Control (NAC)
- Maintain documentation around tools
- Champion the information security tool’s usage to maximize features
- Review access requests around content filtering, removable media and exceptions
Work collaboratively with the various technology teams to accomplish security objectives
Additional security experience may be gained depending on associate’s level of interest and availability:
- Assessing and selecting security vendors or solutions
- Identify emerging vulnerabilities and evaluate associated risks
- Assisting in corporate incident response events
  - Security testing (vulnerability scans, aspects of ethical hacking/penetration testing)
  - Detailed configuration reviews
Responsible for protecting, securing, and proper handling of all confidential data held by Ascensus to ensure against unauthorized access, improper transmission, and/or unapproved disclosure of information that could result in harm to Ascensus or our clients.
Our I-Client service philosophy and our Core Values of People Matter, Quality First and Integrity Always® should be visible in your actions on a day to day basis showing your support of our organizational culture.
Assist with other tasks and projects as assigned

Section 3: Experience, Skills, Knowledge Requirements

Experience managing security tools noted above
Experience with monitoring, detecting, and responding activities
Knowledge of information security risks, at least technical aspects including working knowledge around remediation.
Ability to lead, inspire and motivate associates on the team
Ability to objectively review the team’s work, implement enhancements and monitor quality
Strong written and oral communication skills. The ability to communicate effectively (clear, concise and professionally) with all levels within Ascensus.
Highly organized and able to process and manage inventories of controls and findings.
Excellent analytical and problem resolution skills.
Self-starter and able to work independently.
Persistence and strength to champion initiatives.

Minimum Requirements:

A minimum of 5 years’ experience in Information Security or Security Operations
Knowledge of networking preferred.
Expert level proficiency in MS Office software applications, specifically Word, Excel and Power Point
Bachelor’s degree plus equivalent work experience required.
CISSP certification preferred.

We are proud to be an Equal Opportunity Employer

Originally posted on Himalayas

Job Description

Section 1: Position Summary

The Principal Security Ops Analyst will be responsible for operational security responsibilities across Ascensus.

Section 2: Job Functions, Essential Duties and Responsibilities

Accountability for team’s effectiveness and success
Establish cross-training within team for availability of SecOps functions
Security Event Monitoring & Response
- Monitor security events from all tool sources
- Analyze events filtering for false positives
- Understanding of basic network services, vulnerabilities and attacks
- Incident response process and escalation of events
- Work with the security team to enhance and build new processes & procedures
- Contribute to and maintain documented processes around monitoring & response
- Work closely with information security, IT, risk & governance, and facilities teams.
- Report on security operations metrics quarterly
- Process phishing email escalations from Associates
- Correlate events with other known social engineering attempts
Management of Security Solutions
- Build, manage and maintain tools including, but not limited to:
  - IAM
  - IPS
  - SEIM
  - Web Application Firewall
  - Anti-Virus, Malware and Endpoint Protection
  - CASB
  - UBA
  - DLP
  - Web Proxy/Web content filtering
  - Vulnerability management
  - File integrity monitoring
  - Network Access Control (NAC)
- Maintain documentation around tools
- Champion the information security tool’s usage to maximize features
- Review access requests around content filtering, removable media and exceptions
Work collaboratively with the various technology teams to accomplish security objectives
Additional security experience may be gained depending on associate’s level of interest and availability:
- Assessing and selecting security vendors or solutions
- Identify emerging vulnerabilities and evaluate associated risks
- Assisting in corporate incident response events
  - Security testing (vulnerability scans, aspects of ethical hacking/penetration testing)
  - Detailed configuration reviews
Responsible for protecting, securing, and proper handling of all confidential data held by Ascensus to ensure against unauthorized access, improper transmission, and/or unapproved disclosure of information that could result in harm to Ascensus or our clients.
Our I-Client service philosophy and our Core Values of People Matter, Quality First and Integrity Always® should be visible in your actions on a day to day basis showing your support of our organizational culture.
Assist with other tasks and projects as assigned

Section 3: Experience, Skills, Knowledge Requirements

Experience managing security tools noted above
Experience with monitoring, detecting, and responding activities
Knowledge of information security risks, at least technical aspects including working knowledge around remediation.
Ability to lead, inspire and motivate associates on the team
Ability to objectively review the team’s work, implement enhancements and monitor quality
Strong written and oral communication skills. The ability to communicate effectively (clear, concise and professionally) with all levels within Ascensus.
Highly organized and able to process and manage inventories of controls and findings.
Excellent analytical and problem resolution skills.
Self-starter and able to work independently.
Persistence and strength to champion initiatives.

Minimum Requirements:

A minimum of 5 years’ experience in Information Security or Security Operations
Knowledge of networking preferred.
Expert level proficiency in MS Office software applications, specifically Word, Excel and Power Point
Bachelor’s degree plus equivalent work experience required.
CISSP certification preferred.

We are proud to be an Equal Opportunity Employer

Originally posted on Himalayas