Job Details

Email to Friend Save Back

Senior Security Engineer

NEW YORK-10003, NY, US
01/20/2020

-

Required Skills

Active Directory

Company

Infinity Consulting Solutions, Inc

Experience

5 to 7 Year(s)

Job Description

Responsibilities include, but are not limited to:

Analyze various security logs and related security events to determine risk and develop the necessary action plan

Provide vulnerability assessments and provide remediation plans

Ensure all information technology equipment is configured and operating according to Firm policies and standards

Operate, configure, and fine tune the Security Information and Event Management (SIEM) system.
Investigate and report all information regarding security breaches and other cyber security incidents

Develop automated adaptive responses and alerting of detected cybersecurity incidents

Assist in client security audits and questionnaire

Install and configure security measures and countermeasures to defend against cyber intrusions and attacks

Maintain and oversee various identity access management softwares

Monitor and ensure security controls effectiveness (eg. system patching, firewall changes)

Provide reports to management on key metrics pertaining to security-related issues

Investigate possible security breaches and vulnerabilities identified through audit reports and follow up accordingly with different departments

Perform risk assessments to ensure data remains protected

Work with the business to optimize and automate security-based processes

Qualifications

Bachelor's degree in Computer sciences or related field required

Security certification such as CISSP, CCNA Security or CISM required

5+ years of IT based experience working in a security role, focusing on information security analysis

5+ years of experience with technologies such as Vulnerability Management, Identity Management, Data
Protection, Security Information and Event Management (SIEM), Anti-Virus, Data Loss Prevention,
Endpoint Detection and Response, and Privileged Access Management (i.e. Rapid 7, Symantec, Thycotic, OKTA, and Varonis)

Experience with network management tools, Active Directory and Group Policy

Experience with ISO 27001 certification process or other compliance framework such as HIPPA, PCI and SOX

Excellent written and verbal communication skills including ability to communicate security risks to non-technical people

Exceptional interpersonal skills including teamwork, facilitation and negotiation

Scripting for automation would be major plus

#indeedics1