Associate Security Engineer

The Associate Security Engineer is responsible for basic provisioning, configuration, administration, operation, and maintenance of security related infrastructure. This individual participates in basic technical research, problem triaging, and issue resolution and will be charged with building an understanding of the information technology landscape including security, infrastructure, network, client, server, emerging technology standards, security policies, and associated trends.   The Associate Security Engineer will serve as Tier II support and administer and monitor security functions; identify security issues; assist in the testing, validation, administration, and implementation of security solutions; develop secure operational procedures and contribute to the overall security posture of the organization.   RESPONSIBILITIES: ·       Assist in the testing, validation, and documentation of strategic and tactical security initiatives. ·       Research and identify significant actual and potential cyber security problems, trends, and weaknesses. ·       Assist in the implementation of security solutions to integrate into existing network environment. ·       Get familiar with the use of infrastructure protection tools, methods, and technologies. ·       Get familiar with information security awareness and compliance. ·       Review new and existing systems, networks, and software designs for potential security risks, and resolve integration security issues across disciplines. ·       Proactively monitor security infrastructure and tools to insure reliability and integrity of systems and applications. ·       Investigate and respond rapidly to identified security incidents. Acquire, analyze, and interpret forensic images, packet captures and logs to accomplish rapid and accurate incident response. ·       Collaborate with IT Teams to understand the business and their roles and to incorporate security best practices into daily workflows and procedures. ·       Research and recommend innovative, and where possible automated approaches for system administration tasks. Identify approaches that leverage our resources and provide economies of scale. ·       Develop and implement robust maintenance routines for security infrastructure. ·       Plan and implement software updates and patches on various nodes on the network. ·       Proactively analyzes threats and vulnerabilities and provide a strategy for mitigation. ·       Develop and utilize problem-solving skills to help develop security protocols and procedures to help protect company data and assets. ·       Provide Tier II support per request from various constituencies. Investigate and troubleshoot issues. Manage a feedback loop with Tier I support to improve operational efficiency and customer support. ·       Provide off hours support as needed via on call program ·       Other job duties as assigned.   EDUCATION: ·       Bachelor ’s degree in Information Technology with a concentration in Computer Science or Engineering required. ·       Basic understanding of network protocols such as TCP/IP, HTTP/HTTPS, SSH, SSL, DNS, SNMP. ·       Basic understanding of network troubleshooting, including packet capture and analysis a plus. ·       Familiarity of security concepts such as identity management, least privilege, defense in depth and separation of duties. ·       Experience in AWS Security, Architecture, and Infrastructure administration a strong plus. ·       Experience in securing systems (e.g., common operating systems, network equipment). ·       Experience in administration of EDR, SEIM, Anti-phishing, and other security-related solutions is a plus. ·       Experience writing technical specifications and operational documentation. ·       Knowledge of common web architectures and related security risks. ·       Knowledge of Windows-based operating systems. ·       Basic working knowledge of scripting languages (Power Shell, Python or Perl preferred). ·       Basic familiarity with incident response and forensic investigation. ·       Basic knowledge of security technologies such as IPS, VPNs, Anti-Virus/Anti-Malware, D/DoS, and vulnerability management.  Some hands-on is a plus. ·       Excellent oral and written communication skills and interpersonal skills. ·       A strong desire to learn while being able to complete tasks in a high-pressure environment.

Salary : $0