Information Security Engineer

• Initiates security response procedures when a problem is detected, including resolving incident tickets.
• Updates Computer Security Incident Response Team (CSIRT) documentation and procedures.
• Writes code or script to automate, monitor, and test security solutions.
• Assists in designing, building, configuring, and maintaining cybersecurity threat defense capabilities and user access management.
• Maintains cybersecurity requirements for network, system, and/or application technologies.
• Configures and installs security technologies, such as firewalls, intrusion detection systems, and access controls and implements software fixes to remove system vulnerabilities.
• Performs daily reviews of operating system and network changes and works with system engineers to deploy patches and address vulnerabilities.
• Manages security objects, including SSL Certificates, PGP and private keys, system passwords, anti-virus applications, spyware and malware solutions, and identity management.

Nature and Scope

• Demonstrates skill in data analysis techniques by resolving missing/incomplete information and inconsistencies/anomalies in more complex research/data.
• Nature of work requires increasing independence; receives guidance only on unusual, complex problems or issues. Work review typically involves periodic review of output by a supervisor and/or direct customers of the process.
• May provide general guidance/direction to or train junior level support or professional personnel.

Work Environment

• Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
• Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.
• Typically requires overnight travel 5% to 20% of the time.

• Bachelor’s degree in computer science or a related field.
• 2+ years of cybersecurity engineering experience.
• Security-centric certification, such as Security+ or Certified Ethical Hacker (CEH)., * Typically requires BS/BA in a related discipline. Generally 2-5 years of experience in a related field OR MS/MA and generally 2-4 years of experience in a related field. Certification is required in some areas.