Security Engineer

Company Overview:

Satcom Direct (SD) provides global connectivity solutions for business and general aviation, military, government, and land mobile services. Since 1997, SD has worked to solve the unsolvable and advance the technology of connectivity through our industry-leading hardware and flight operations software. Our company culture is based on innovation and creativity which allows our team members to thrive in a dynamic atmosphere. We are looking for people who are passionate about customer satisfaction and who excel in a constantly changing environment.

Satcom Direct offers a highly competitive benefits package. For our US based employees, the company covers the entire cost for an employee’s health, dental, vision, disability, and life insurance, as well as contributing to a significant portion of the family premium. Our global headquarters offers an on-site gym staffed with personal trainers, a café, food trucks, social hour, and more. With an open vacation policy, employees have the flexibility to take time when they need it. SD is centrally located on the beautiful Space Coast in Viera, FL, which is one of the Top 50 Master-Planned Communities in the United States.

JOB SUMMARY:

The Security Engineer is responsible for providing security expertise relative to architecture, application development, database, design, implementation and operational processes for the Corporate Information Security and Compliance Department (CISCD). This is achieved by planning, designing, and developing security best practices then implementing it. In addition, the Security Engineer will participate with the installation, monitoring, maintenance, support, and optimization of all security hardware, software, and communication systems and will serve as provided Tier 1 and 2 security support. This individual will also analyze and resolve security related problems in a timely and accurate fashion and provide end user training where required. As a result, the candidate must have a working understanding of technology, security standards, and industry best practices.

*This is not a remote position*

ESSENTIAL DUTIES/RESPONSIBILITIES:

The requirements listed below are representative of the fundamental knowledge, skill, and/or ability required to perform the job successfully:

• Engineer and implement physical/logical security controls to ensure the continued protection of the enterprise
• Monitor networks and systems for security breaches, through the use of software security tools
• Analyzes internal operational architecture, tools, and procedures for ways to improve performance
• Design and support Identity and Access Management solutions for the enterprise
• Support the Vulnerability Management program and remediation efforts
• Implements company awareness training on information security standards and policies
• Performs network penetration, web and mobile application testing, source code reviews, threat analysis, wireless network assessments, and social-engineering assessments
• Coordinate with security vendors for all work requiring third-party services
• Coordinates projects with internal stakeholders as required
• Participate in the security governance model, establishing policies, standards, and best practices
• Participate in the incident management lifecycle, including escalation, communication, debugging, resolution, and problem management
• Participate in an on-call rotation for support of after-hours security issues
• Document security processes, procedures, and systems. Documents and creates reports to support business requirements.
• Document and escalate reporting of identified security risks and incidents to the CISO
• Develops scripts and tools to automate security functions (auditing, process automation, security testing)
• Knowledge of security frameworks such as NIST 800-53, 800-171, ISO 27000
• Serves as a security Subject Matter Expert (SME) for business and IT projects and initiatives
• Performs security and risk assessments of third parties

GENERAL QUALIFICATIONS, KNOWLEDGE, AND SKILLS:

Equivalent combination of education or experience may be considered.

• BS in Information Systems or Computer Science
• 2-5 years of Information Technology experience
• Industry Certification: Security , SSCP, CEH, OSCP or similar certification with a requirement to obtain a CISSP, when eligible.
• Knowledge of security frameworks such as NIST 800-53, 800-171, ISO 27000
• Strong organizational, technical, analytical, and problem-solving skills are required.
• Proven project management skills
• Working knowledge of and experience with Vulnerability Scanners, SIEM, Access Systems, CCTV, Email Security Appliances, MFA system, AV/AM, IPS/IDS (NIPS/NIDS, HIPS/HIDS,), Network Access Controls (NAC), Ethical Hacking systems
• Software:  Qualys, LogRhythm, C-Cure, ExacqVision, Proofpoint, Jira, Confluence, Palo Alto, DualShield, Kali
• Programming Languages:  Powershell, Python, C#, JavaScript

PHYSICAL DEMANDS: 

While performing general office duties for this position, the employee is regularly required to sit, stand and/or walk around (including the use of stairs). Other demands include the ability to openly communicate with others by talking, listening and reading, able to lift light objects (<25lbs), and use standard office equipment such as computer, printer, phone and cell phone. In addition, there is an occasional need to bend, twist or stoop in order to open/close cabinets, reach for files or other standard office type objects. An on-call rotation for support of after-hours security issues is required.

WORK ENVIRONMENT: 

The office environment is generally quiet and, in a temperature, controlled setting with random adjustments in noise or temperature due to others talking or laughing loudly, unscheduled maintenance repairs to the building or its interior offices or unpredictable situations due to weather or other acts beyond company control. An employee must be willing to work their regularly assigned work schedule for their particular duties and/or job responsibilities and in times of need, be able to work an extended schedule depending on company/department needs, project requirements or customer demands. Some overnight travel is required to facilitate work objectives. While at client site locations, if applicable, employee will be required to adhere to the proper safety precautions established by the client while in proximity to their work area, flight-line or maintenance repair center; work may require some physical effort in the handling of light materials, boxes or equipment. The temperature at client locations can vary from controlled to variations off hot/cold when working, standing or walking in or near the flight-line or maintenance repair center.

If you are interested in applying for employment and need special assistance or an accommodation to apply for a posted position, contact our Human Resources department at (321) 777-3000

Satcom Direct is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status, and will not be discriminated against on the basis of disability.

In compliance with Colorado’s Equal Pay for Equal Work Act, the salary range for this role in Colorado is $85,000-$120,000. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location. SD also offers a variety of benefits including: health and disability insurance, 401(k) match, flexible spending accounts, EAP, education assistance, parental leave, paid time off, and company-paid holidays. The specific programs and options available to an employee may vary depending on date of hire, experience level and location.

AN