Information Security Engineer

Support the detection, monitoring and tracking of security vulnerabilities at the application, database, server, workstation and OS levels

Tune-in and configure SIEM performance and events data quality to maximize log correlation efficiency

Work closely with the network team to implement and maintain network access control technologies

Configure Security Orchestration, Automation, and Response (SOAR) tools, scripts, events, and playbooks

Expertise in shell scripting and other programming languages, such as Python and/or Power Shell

Proficiency in understanding and using regular expressions (regex)

Solid understanding of REST/SOAP/WSDL/XML (Web Services), HTTP Request Methods.

Work closely with the compliance team to identify, document and implement various security controls related to NIST, FedRAMP, HiTRUST, and ISO 27001

Guide the network and operations teams in implementing security best practices

Work with network, and systems engineering teams to promote automation, automated monitoring and administration functionality

Implement, and support security solutions including but not limited to Intrusion Detection, Log Management, Data Loss Prevention, Vulnerability Management, Web Content Filtering, and Configuration Management

Support the efforts to develop operational best practice procedural documentation for operations staff

Assist in the development and documentation of various systems, policies, procedures, and customer deliverables

Research new products and make appropriate recommendations

Develop and design project plans, tasks and timelines and then provide verbal and written status reports as directed

Conduct on-going security assessments, document and track findings and remediation activities

Provide on-call support as needed

BS in Computer Science, Engineering or related field desired

Minimum 3 years of experience supporting enterprise level environment

Must have a good understanding of the following: Log correlation, SIEM technologies (AlertLogic, ArcSight, Q1 Radar, Log Rhythm, Splunk, etc.), IDS/IPS technologies, Vulnerability Scanners (Nessus, Qualys, etc.) and other related technologies

Understanding of common web application vulnerabilities and familiarity with using web application scanning tools such as Burp Suite, ZAP Proxy, Acunetix, etc.