Information Security Engineer  

Will work with the technical teams to understand our environment and to ensure compliance with RoundPoint security and technical standards and processes.

• Perform reviews of hardware, software, and firmware technologies for possible security vulnerabilities that impact the information security of RoundPoint information assets. Recommend risk mitigation techniques and appropriate configuration Standards. (Security reviews, mitigation plans, data classification)
• Perform analysis of all firewall rules (new, modified and deleted) to ensure that RoundPoint's perimeter defenses are configured and secure from unintended access
• Working with other Information Systems personnel, perform assessments of proposed architectures or implementations affecting RoundPoint infrastructure components
• Perform risk monitoring of critical and confidential infrastructure components to identify potential information security breaches and recommend and/or implement mitigation techniques
• Daily review of privileged accounts, infrastructure devices storing electronic customer information, high-value servers and software code to ensure the integrity and confidentiality of these critical systems
• Using approved tools, perform security tests and audits, analyze results and provide recommendations to ensure applicable systems are operating in accordance with Corporate Information Security Policies, Standards, and Procedures
• Perform periodic vulnerability and penetration tests using approved tools to identify potential threats to RoundPoint's information assets and infrastructure and collaborate to mitigate findings
• Assist in the coordination and administration of compliance with disaster recovery and contingency plans to assure security is maintained during the rapid recovery, in the event of an information system emergency or disaster
• Participate and support the investigation and reporting of security violations of the Corporate Information Security Policies and Standards. Participate with in-depth inquiries, assessing potential damage, and implementing corrective action
• Provide on-call technical support where necessary
• Incumbent will be responsible for meeting RoundPoint’s commitment to compliance

• Thorough working knowledge industry trends and best practices in the areas of threat, incident, risk and vulnerability management
• Experience with implementation and support of enterprise network technologies (IPv4/6, routing, OSPF, EIRGP, IPSEC/VPN, WLAN, MPLS, 802.1x)
• Experience with encryption related technology (SSL, TLS, PKI, endpoint encryption)
• Understanding of PCI and SOX security standard.
• Experience in fast-paced production environments working under tight deadlines
• High degree of initiative, self-motivation and follow through