Security Engineer

Job Title: Sr. Security EngineerDuration: 6 months Contract To HireLocation: Looking for someone near our physical NY office (NYC) and datacenter (Weehawken, NJ) who could support on-site physical equipment (powering off a firewall, checking cable connectivity, shipping equipment, configuring equipment that is not remotely accessible). About the PositionClient X is seeking an exceptional Senior Security Engineer to join its IT Security Team in our New York office. This person will join a distributed, highly collaborative team that is responsible for the setup and maintenance of security equipment for a global network. The successful candidate will demonstrate strong technical skills and will have the technical credibility to be a lead participant in the architecture, design, and implementation of complex security solutions including interconnectivity with third party partners and market data providers and DMZ configuration and hardening. In addition to exceptional technical skills, the ideal candidate will demonstrate an ability to provide the highest level of support for troubleshooting incidents. Experience with updating problem records in an incident tracking system is needed and he or she must be comfortable interacting with various individuals or in an ever-changing environment. This person will help to lead projects where close coordination and communication is required with other areas such as the networks, database management, system services, and application development organizations. The ideal candidate will have at least eight years of hands on technical experience with firewall design and implementation with physical and\or virtual Next Generation firewalls and will have at least three years of experience in working with cloud implementations. Experience with automation technologies such as Ansible Tower would also be helpful. Specific Responsibilities Include

• Operational management of security platforms including, but not limited to, firewalls, load balancers, web proxies, endpoint security technologies.
• Documentation and implementation of firewall policy and rule changes.

1. Manage physical equipment such as the rack, stack and installation of security equipment in any company location including enterprise data centers
2. Assist in supporting the security platforms protecting our enterprise systems and environment
3. Assist and train team members in the use of cloud security tools and the resolution of security issues

• Provide technical support for complex, medium to high risk systems problems
• Instill cooperation and/or resolve problems on security related activities that span other areas such as network, database management, applications development, and other systems related areas
• Implement automated approach to delivering key security management processes
• Communicate security risks and solutions to business partners, platform & product teams
• Partner with Security Architecture to evaluate cloud security technologies, provide feedback on designs, and implement processes and integrations of highly complex solutions.
• Develop procedures for automating security tasks during build and deployment

• Bachelor’s degree with a degree in Computer Science, Computer Engineering, EE or comparable discipline preferred
• Eight plus years of hands on firewall design, implementation, and change management experience with physical and\or virtual Next Generation firewalls.
• Three plus years of hands on experience working with cloud implementations
• Extensive knowledge with relevant experience in at least five of the following categories:
• Serve as a project lead or a project member on projects of varying size and complexity and risk.
• Third party and VPN connectivity architecture and design
• DMZ network segmentation design best practices
• Intrusion Detection/Prevention System tuning
• Security hardening and configuration techniques
• Application firewall design
• Antivirus / Endpoint protection design and implementation
• Patching and vulnerability remediation management
• Web Proxy architecture / design
• Cloud (IaaS, PaaS, and SaaS) hosted security solutions
• PKI and certificate management concepts
• Preferred security certifications:
• PCNSA
• Microsoft Azure security Engineer Associate
• CISSP
• GSEC
• GCIH
• GMON
• Sufficient level of knowledge in other technical areas such as database management and networking so incumbent can represent his/her area on major cross functional problems that span other areas
• Broad knowledge of monitoring tools
• Diagramming using Visio or equivalent tools
• Excellent organizational skills and superior troubleshooting / problem solving ability