Information Security Engineer

• Support the detection, monitoring and tracking of security vulnerabilities at the application, database, server, workstation and OS levels
• Tune-in and configure SIEM performance and events data quality to maximize log correlation efficiency
• Work closely with the network team to implement and maintain network access control technologies
• Configure Security Orchestration, Automation, and Response (SOAR) tools, scripts, events, and playbooks
• Expertise in shell scripting and other programming languages, such as Python and/or Power Shell
• Proficiency in understanding and using regular expressions (regex)
• Solid understanding of REST/SOAP/WSDL/XML (Web Services), HTTP Request Methods.
• Work closely with the compliance team to identify, document and implement various security controls related to NIST, FedRAMP, HiTRUST, and ISO 27001
• Guide the network and operations teams in implementing security best practices
• Work with network, and systems engineering teams to promote automation, automated monitoring and administration functionality
• Implement, and support security solutions including but not limited to Intrusion Detection, Log Management, Data Loss Prevention, Vulnerability Management, Web Content Filtering, and Configuration Management
• Support the efforts to develop operational best practice procedural documentation for operations staff
• Assist in the development and documentation of various systems, policies, procedures, and customer deliverables
• Research new products and make appropriate recommendations
• Develop and design project plans, tasks and timelines and then provide verbal and written status reports as directed
• Conduct on-going security assessments, document and track findings and remediation activities
• Provide on-call support as needed

Ideal candidates should be able to work 9am - 6pm ET (US Hours)

• BS in Computer Science, Engineering or related field desired
• Minimum 3 years of experience supporting enterprise level environment
• Must have a good understanding of the following: Log correlation, SIEM technologies (AlertLogic