IT Security Engineer

Position Summary

The IT Security Engineer is responsible for designing, implementing and supporting technological solutions to improve organization IT and OT Security in accordance with regulatory and industry best practices and standards.

Essential Duties and Responsibilities

• Design, implement, administer and maintain privileged identity solutions.
• Design, implement, administer and maintain vulnerability management and remediation solutions.
• Design, implement, administer and maintain Intrusion Detection and SIEM solutions.
• Conduct research, analyze and report on current threats and vulnerabilities from emerging security issues.
• Integrate threat intelligence and Indication of Compromises (IOCs) into detection and response capability.
• Apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Understand and integrate solutions that adhere to the NIST Cybersecurity Framework and the Center for Internet Security Critical Security Controls, as well as other compliance frameworks as required by the organization.
• Adhere to Secure Architecture guidelines utilizing established principles of minimization, separation of duty, least privilege, least access, audit logging, and continuous monitoring.
• Document team procedures for administering cybersecurity and IAM services.
• Design business continuity plans for team services.
• Perform cyber incident response in accordance with organizational procedures and methods.
• Serve as SME role in projects.
• Handle service desk tickets.
• On-call rotation.
• Perform related work as required.

Minimum Requirements

Education and Experience

• Bachelor's Degree from an accredited college or university in Computer Science or a related field.
• Minimum 6 years of related work experience.
  • 2 years of IT Security/IT Security Engineering experience strongly preferred.
• Any equivalent combination of certifications, education, or experience that provides the required skills, knowledge, and abilities for the position.

Licenses, Registration, and Certifications

• Certified Security Essentials (GSEC), Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), or other relevant certification preferred.
• Must complete required HIPAA training within the first 6 months of hire.