Sr. Security Engineer

HKS, Inc

Dallas, TX, United States

3 days ago

Apply on jobs.localjobnetwork.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

6 years minimum

Working hours

Regular working hours

Job source

jobs.localjobnetwork.com

Tech stack

Microsoft Word Microsoft Excel Data Analysis Microsoft Azure Microsoft Online Services Microsoft Outlook Cyber Security Identity and Access Management Intrusion Detection and Prevention OSI Models Microsoft Office Microsoft Servers

+11 more

Phishing Security Information and Event Management Software Vulnerability Management Data Logging Okta Cyber Threat Analysis Microsoft InTune Falcon Platform Information Technology Cloudflare Cisco

Job description

Engineers, implements, and advocates for effective security operation standards and controls, including security monitoring, threat detection, incident response, threat intelligence, vulnerability management, access management, compliance and reporting
Develops and implements a comprehensive vulnerability management program, and proactively identifies and analyzes emerging threats and vulnerabilities
Leads efforts to remediate security weaknesses and improve overall security posture
Leads incident response investigations, performs root cause analysis, and develops comprehensive incident reports
Recommends and implements improvements to incident response processes and procedures while mentoring junior team members in incident handling techniques
Leads the development, implementation, and maintenance of security documentation, including policies, standards, procedures, and guidelines
Ensures documentation is aligned with industry best practices, regulatory requirements, organizational needs, and provides guidance and training to other team members on security documentation standards
Develops and implements a comprehensive security reporting framework that aligns with business objectives and regulatory requirements
Leads the creation of executive-level security reports, providing strategic insights and recommendations to senior management
Oversees the development and maintenance of security dashboards and metrics to track key performance indicators (KPIs) and ensures that security reporting is accurate, timely, and relevant to the needs of the audience
Develops and implements a comprehensive security awareness program that aligns with industry best practices and regulatory requirements
Leads the creation of engaging and informative training content, including interactive modules, videos, and simulations
Oversees the execution of phishing campaigns and analyzes results to identify vulnerabilities and improve training effectiveness
Provides guidance and mentorship to junior engineers on developing and delivering security awareness training
Provides expert guidance and advice to other IT teams on security architecture, design, and implementation
Leads security reviews and audits of IT projects and initiatives and develops and delivers security awareness training programs for IT staff
Mentors a team responsible for incident detection, response, mitigation, and retrospection, ensuring adherence to industry standards and best practices
Champions security best practices across all IT teams and provides expert guidance to other IT teams on security architecture, design, and implementation
Leads incident response efforts, conducts in-depth analysis of complex threats, develops and implements remediation strategies while mentoring junior engineers and contributes to security documentation and process improvement
Develops and implements a comprehensive security reporting framework that aligns with business objectives and regulatory requirements
Leads the creation of executive-level security reports, providing strategic insights and recommendations to senior management
Develops and implements a comprehensive security awareness program that aligns with industry best practices and regulatory requirements
Leads the creation of engaging and informative training content, including interactive modules, videos, and simulations
Oversees the execution of phishing campaigns and analyzes results to identify vulnerabilities and improve training effectiveness
Provides guidance and mentorship to junior engineers on developing and delivering security awareness training
Proactively searches for indicators of compromise and escalate findings to leadership
Provides after-hours support upon request by management on as-needed basis
Performs other duties assigned by leadership
Continuously learn and develop cybersecurity skills and knowledge and embraces a culture of continuous service improvement and service excellence
Stays current on security industry trends, harassment, intimidation, threats, coercion, or discrimination for filing a complaint, assisting or participating in an investigation, compliance evaluation or hearing, opposing and/or exercising any other right made unlawful by Executive Order 11246, Sections 503 and 38 USC 4212, as amended, or their implementing regulations, or any other Federal, State or local laws requiring equal opportunity.

Requirements

B.A./B.S. degree in Computer Science or related field, or equivalent work experience
Advanced Information Security Certification (CISSP, CISM, CASP+, CySA+, CCSP ) required
Typically with 6+ years of experience with cyber security incident response & remediation activities
Advanced experience regarding all layers of the OSI model
Advanced competency in Microsoft Server, Microsoft Intune, Office 365 and Microsoft Azure
Experience with logging and altering platforms, including SIEM integration
Experience with CATO SSE Expert, CATO Advanced Security, CATO SASE Deployment and Management
Experience in MS Office Suite, including Excel, Outlook and Word
Experience with the following security solutions (Okta, Crowdstrike, Microsoft Cloud App Security, Tenable, Mimecast, Cloudflare) preferred
Knowledge of Cisco network device (managed switches and routers) configurations and management supporting both LAN and WAN architectures
Knowledge of Palo Alto firewall, Prisma and SASE environments
Proven track record of unprompted consistent improvement
Strong customer service, interpersonal skills and the ability to interact with all levels of staff
Strong work ethic and eagerness to produce high quality, accurate results
Ability to hold sensitive information with a high level of confidentiality and integrity
Ability to communicate and present ideas in a clear, concise and professional manner both verbally and in writing
Ability to proactively problem solve and apply innovative solutions
Ability to work and collaborate in a team environment, and ability to work independently and prioritize work
Ability to work on multiple projects at the same time
Ability to effectively meet deadlines at expected quality
Travel may be required