IT Security Engineer

Description

ROLE SUMMARY

The IT Security Engineer is a hands-on technical position responsible for the engineering, implementation, administration, testing, documentation, and continuous improvement of the organization's cybersecurity technologies and controls.

Working under the direction of the IT Security Director, this position translates cybersecurity strategy, risk requirements, and architectural direction into effective technical solutions. The engineer will take ownership of security engineering initiatives from technical research and design through testing, implementation, documentation, validation, and ongoing optimization.

The position will work across endpoint security, identity and access management, security monitoring, vulnerability management, network security, cloud environments, applications, email security, automation, infrastructure, and emerging technologies.

This is an Hourly, Non-Exempt position.

Key Responsibilities

• Ability to assess complex cybersecurity issues, isolate root causes, and apply sound technical judgment.
• Ability to explain technical risks and remediation options clearly to both technical and nontechnical stakeholders.
• Ability to plan and execute work with accuracy, appropriate change control, and thorough documentation.
• Ability to manage competing priorities, exercise discretion, and escalate risks or incidents in a timely manner.
• Ability to work independently in a remote setting while collaborating across locations and business functions.

Security Engineering And Implementation

• Design, configure, implement, test, administer, and improve cybersecurity controls and technologies.
• Translate security requirements and architectural direction into technical configurations and solutions.
• Evaluate existing security configurations and identify opportunities for improvement.
• Develop implementation plans, configuration standards, testing procedures, and rollback procedures.
• Validate implemented controls and document results.
• Partner with infrastructure, networking, application, development, and operations teams to implement security requirements.
• Maintain secure configuration baselines and periodically validate deployed controls against those baselines.

Security Monitoring And Detection Engineering

• Engineer and maintain enterprise security monitoring and detection capabilities.
• Develop and tune detection logic for suspicious and malicious activity.
• Develop threat-hunting and investigative queries.
• Onboard security telemetry and ensure appropriate logging coverage.
• Troubleshoot log collection, parsing, normalization, and ingestion issues.
• Develop security dashboards and operational reporting.
• Evaluate detection effectiveness and identify monitoring gaps.
• Maintain documentation describing security telemetry, detection logic, and response procedures.

Identity And Access Security Engineering

• Engineer and maintain identity and access security controls.
• Support multifactor authentication, conditional access, authentication policies, privileged access, and identity protection capabilities.
• Review administrative, service, application, and workload identities.
• Implement and validate least privilege of access controls.
• Investigate suspicious authentication and accountancy activity.
• Assist with privileged-access security and administrative account protection.
• Develop identity-related security monitoring and detection capabilities.
• Test proposed identity-security changes before production implementation.

Vulnerability And Exposure Management

• Administer and improve vulnerability and exposure-management capabilities.
• Manage authenticated, agent-based, and network-based security assessments where applicable.
• Research vulnerabilities, security advisories, attack techniques, and emerging threats.
• Analyze vulnerability severity, exploitability, exposure, asset criticality, and business impact.
• Prioritize remediation activities based on organizational risk.
• Coordinate remediation efforts with system, infrastructure, and application owners.
• Perform post-remediation validation.
• Maintain vulnerability-management documentation, metrics, and technical evidence.
• Identify systemic security weaknesses rather than treating vulnerabilities solely as individual findings.

Incident Response And Technical Investigation

• Serve as a technical escalation point for complex security events and incidents.
• Investigate endpoint, identity, network, cloud, email, and application security events.
• Analyze authentication activity, system behavior, processes, network activity, logs, and other security telemetry.
• Determine the scope and potential impact of security incidents.
• Perform or coordinate authorized containment and remediation actions.
• Collect and preserve technical evidence.
• Identify indicators of compromise and relevant attacker behaviors.
• Develop additional detections based on investigation findings.
• Perform root-cause analysis.
• Document investigations, findings, remediation, and lessons lea...

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam, eaque ipsa quae ab illo inventore veritatis.