Senior Information Security Engineer

Job Overview

Our client in the White Marsh area of MD has an excellent opportunity for a Senior Information Security Engineer!

 

Responsibilities:

  • Provide technical leadership and expertise with the deployment and maintenance of Information Security solutions.
  • Planning, design, installation, maintenance and support of security safeguard technologies ranging from, but not limited to firewalls, intrusion prevention & detection systems, enterprise anti-virus and patching solutions, data leakage prevention, two-factor, threat detection, vulnerability scanners and software deployment tools.
  • Work with IT staff and business units to assess risk and address security issues.
  • Provide expertise and guidance around issues while recommending solutions that mitigate and eliminate risk assets.
  • Define company security requirements and review systems to determine if they have been designed to comply with established security standards; develop new standards, as necessary.
  • Forensics and post-mortem investigations of Information Security incidents while preparing report documents illustrating the findings.
  • Ensure that controls are in place and managed properly to meet legal and regulatory compliance of all network and system infrastructures.
  • Assist in the enforcement of security policies from planning, technology safeguards and remediation for data, software applications, hardware, and telecommunications.
  • Ensure the development of and adherence to industry standards and best practices for all Information Security related responsibilities. This includes but is not limited to datacenters, networks, telephony, systems, databases, and applications.
  • Validate and test security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.
  • Review and recommend the installation, modification or replacement of hardware or software components and any configuration change(s) that affect or risk security posture.
  • Lead InfoSec development, testing and QA functions to ensure that projects are securely delivered and fulfill expectations.
  • Build and maintain relationships with teams and third parties on security development and support issues.
  • Member of the Security Incident Response Team. Provide highest level of technical expertise to ensure problem resolution is achieved in the shortest possible timeframe.

 

Requirements:

  • Bachelor’s degree in a related discipline (Computer Science, Information Systems Management, Engineering, or similar).
  • CISSP certification.
  • Minimum of ten (10) years of security engineering experience, specifically in networks, systems, database, and operations. Extensive expertise in developing and supporting complex security solutions.
  • Previous Network Engineering or Systems Engineering background.
  • Experience using scripting languages to automate tasks and manipulate data; programming experience is a plus.
  • System administration experience in a Windows, Linux, and Unix environment.
  • Experience securing web applications and a strong understanding of web application design, function, and secure software development lifecycle.
  • In depth understanding and working knowledge of OWASP.
  • Experience deploying, supporting, and safeguarding technologies in Amazon Web Services environments.
  • Experience developing technical documents and procedures, topology maps and with various software applications.
  • Experience with all aspects of high availability fault tolerant architectures.
  • Ability to explain complex ideas and concepts to both a technical and nontechnical audience.
  • Passion for providing excellent customer service.
  • Ability to work in a fast-paced environment; ability to multi-task, change direction, effectively prioritize, and meet deadlines.
  • Ability to occasionally adjust work schedule to meet business needs (standard forty (40) hour week, with occasional after hours and weekend requirements).
Job Detail
Shortlist Never pay anyone for job application test or interview.