Security Engineer

Full time opening for a Security Engineer. This role is on site for the first few months and then offers hybrid options. Seeking an experienced Security Engineer responsible for designing, implementing, and maintaining enterprise security solutions to protect critical network infrastructure, systems, and data. Partner with IT, compliance, and business teams to reduce cyber risk, strengthen security posture, and ensure compliance with financial industry regulations., * Design, implement, and administer enterprise security solutions across network, endpoint, and cloud environments.

• Deploy, manage, and optimize SIEM platforms (Splunk) for centralized security monitoring, threat detection, and incident response.
• Monitor and maintain Intrusion Detection and Prevention Systems (IDS/IPS) to identify and respond to suspicious activity.
• Configure and support network-based Data Loss Prevention (DLP) technologies to safeguard sensitive information.
• Conduct vulnerability assessments using Nessus and coordinate remediation efforts with system owners.
• Implement and maintain zero-day threat protection technologies, including FireEye/Trellix solutions.
• Manage endpoint security and XDR platforms, including Cisco AMP, Trellix, and Microsoft Defender.
• Implement and administer Identity and Access Management (IAM) solutions, including Okta and RSA MFA.
• Architect, configure, and maintain firewalls, next-generation firewalls (NGFW), web content filtering, and network segmentation solutions.
• Monitor network traffic and security events utilizing NetFlow and network visibility tools.
• Support Cisco security technologies, including Cisco Identity Services Engine (ISE), Cisco Secure Workload (CSW), and StealthWatch.
• Generate security reports, maintain architecture documentation, and provide recommendations to improve security posture.
• Collaborate with IT and compliance teams to ensure adherence to security policies, standards, and regulatory requirements.
• Participate in Tier 2 incident escalation and rotating after-hours support coverage.
• Manage multiple security projects while ensuring timely delivery and adherence to change management processes.
• Work with third-party service providers to support and enhance security operations.

• SIEM Administration (Splunk)
• Web Content Filtering (ForcePoint)
• Intrusion Detection and Prevention Systems (IDS/IPS)
• Data Loss Prevention (DLP)
• Vulnerability Management (Nessus)
• FireEye/Trellix Zero-Day Protection
• Endpoint Security & XDR Solutions
• Firewalls & Next-Generation Firewalls (NGFW)
• NetFlow & Network Visibility Tools
• Cisco Secure Workload (CSW)
• Cisco Identity Services Engine (ISE)
• StealthWatch
• Okta & RSA Multi-Factor Authentication (MFA)
• Email Security Technologies
• VMware & Virtualization Technologies, * Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 3-5+ years of hands-on Information Security Engineering experience.
• Strong knowledge of security risk assessment methodologies and vulnerability management practices.
• Experience securing enterprise network environments and perimeter security technologies.
• Familiarity with financial industry regulations including NCUA, GLBA, and PCI DSS.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication, documentation, and technical writing abilities.
• Proven ability to manage multiple projects and priorities simultaneously.
• Experience working with third-party vendors and service providers.