Information Security Engineer & Architect  

Key Responsibilities

• Serve as Information Security SME on all infrastructure and business projects and identify key security exposures, provide compensating control and remediation recommendations.
• Be the technical lead of Information Security projects. Partner with the project manager and establish technical requirements and milestones.
• Evaluate security risks of vendors, critical business partner sites, and mergers and acquisitions.
• Communicate important security developments and activities to Infosec management as appropriate. Exercises a high level of judgement on information security related matters.
• Conduct regular reviews and provide exception/exposure reporting and remediation plans to leadership.
  Create, maintain and ensure adherence to security policies, procedures, guidelines and control standards.
• Assist in the management and coordination of periodic security assessments.
• Partner with IS teams to remediate security vulnerabilities and respond to information security incidents that could potentially impact the network, systems and applications.
• Develop reports and metrics on risk status of network infrastructure, applications, internet activity, email filtering and vulnerability management, including recommendations for improvements.

Skills & Experience

• 8+ years’ experience in technical IT or Information/Cyber Security; 5+ directly related to role.In-depth knowledge of network intrusion methods, network containment and segmentation techniques.
• Demonstrated knowledge of industry standards and methodologies, including NIST-CSF, MITRE Att&ck Framework.
• Technical understanding of security tools, applications and their integration into data center operations and infrastructure
• 4+ years of work experience with servers / networking.

Job Qualifications and Educational Requirements

• Education: Bachelor’s degree in Computer Science, Engineering, Science, Math or Cyber Security related field is required.
• Track record of success in defining and developing an information security and other IT organizations and delivering a strategy across a large, complex, international organization with a mixture of legacy and new technology.
• Significant information security experience with a track-record of liaising at all levels of the business and being a credible peer with technical engineers
• Strong written and verbal communication skills to effectively interact with internal and external partners on all levels to resolve technical and business level discussions on security matters and provide solutions in a timely manner.
• Strong scripting experience preferred (i.e. PowerShell, Python, Ruby, etc.).
• Technical networking and security certifications, e.g. CISSP is a plus.