Standard Power (SP) is currently seeking a Security Engineer (SE) for our Conesville, OH, USA location. Reporting to the CIO, the Security Engineer will lead the design of SP's information and cyber security practices and systems. Further, the SE will guide and contribute to the implementation and maintenance of these tools and practices. The expected security program will cover the organization's information assets and associated technologies, applications, systems, infrastructure, and processes to provide appropriate levels of protection and maturity for compliance and continuous operation.
Who We Are:
Standard Power is a regional high voltage electrical infrastructure company providing Data Centers, Infrastructure as a Service, Server Management and Colocation Services to advanced data processing companies.
Essential Duties/Responsibilities:
- Research, design, and implement information security solutions for organization systems and products that comply with all applicable security policies and standards.
- Work with IT and internal and external business partners to ensure that security is factored in the evaluation, selection, installation and configuration process of hardware and software.
- Analyze and make recommendations to improve network, system, and application architectures. Perform routine scans of network and infrastructure systems and report summary results to management.
- Examine network, server, and application logs to determine trends and identify security incidents.
- Perform reviews, updates, and configuration of firewalls (Sonicwalls), information security policies, architectures, and standards.
- Assist in responding to audits, penetration tests and vulnerability assessments.
- Assist Infrastructure and Applications teams to remain compliant with cyber/information security policy and practices.
- Participate in SP's information security governance structure including alignment with the Corporate Risk, IT Governance and IT Leadership team.
- Develop and manage the ongoing operation of an Information Security Management System encompassing required aspects of the ISO 27000 standard, NIST 800/CMMC and SOX frameworks.
- Manage and contain information security incidents and events to protect SP assets.
Required Skills:
- Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering or related field with a minimum of 5 years of hands-on information security engineering and administration experience.
- Cybersecurity specific certifications such as CISSP (Certified Information Systems Security Professional and/or CISM (Certified Information Security Manager) preferred.
- Technical expertise in network security knowledge, to include VPN, Firewall, network monitoring, intrusion detection, web server security, and wireless security.
- Strong knowledge of common vulnerabilities and exploitation techniques.
- Direct experience with Microsoft and other cybersecurity tools, monitoring systems and alert frameworks.
- Demonstrated experience implementing and managing security policies and systems within a data center environment.
- Excellent verbal and written communication skills, interpersonal and collaborative skills, and the ability to communicate information security and risk-related concepts to technical and non-technical audiences at various levels within the organization.
- Significant hands-on experience implementing security and/or network components, i.e. routers, firewalls, IPS, IDS, etc.
- Sound knowledge of business management and a working knowledge of information security risk management and cyber technologies.
- Proven track record and experience in developing information security policies and procedures as well as successfully executing programs that meet high corporate standards for execution.
- High degree of initiative, dependability, and ability to work with little supervision while being resilient to change.
Standard Power is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status.