Information Security Engineer at Jobisite / employment-usa.net

This job ad has been posted over 40 days ago...

applicants

Information Security Engineer

at Jobisite in California

Responsibilities
Monitor AV/EDR/IDS/IPS solutions for incidents, threat hunt for malicious activity, and triage as needed on a 24x7 basis.
Adhere to service level agreements (SLAs), metrics and business scorecard obligations for ticket handling of security incidents and events.
Support incident management and response activities as a member of the bank’s incident management team. Assist in triage, response and mitigation, postmortem analyses, and forensic analysis.
Configure and tune AV/EDR/IDS/IPS solutions to improve detection and reduce noise
Assist in creating correlation rules to enhance detection via SIEM platform
Assist in penetration testing efforts including coordinating, testing, reporting, and remediation of findings.
Partner with the security engineering team to improve tool usage and workflow and mature monitoring and response capabilities.
Assist in vulnerability management remediation efforts including analyzing findings from network scanners and application security tools
Support the vulnerability management program by reviewing and inputting approved exceptions in vulnerability management solution
Monitor enterprise spam and phishing emails and participate in developing social engineering exercises
Perform security testing and vulnerability assessments to identify security strengths and weaknesses, to assess the effective ness of existing controls, and to recommend remedial action.
Review audit trails, system logs and other monitoring data sources regularly and ensure they are in compliance with policies and audit requirements.
Assist in monitoring DLP incidents, investigation, and tuning of DLP solution
Qualifications
Skills and Experience

Experience with incident response handling
Experience in a SOC environment a plus
Familiar with risk assessment methods and technologies
Experience with IDS/IPS/SIEM and related security tools and technologies such as Splunk, Splunk ES, DLP.
Experience with Vulnerability Management and network scanners.
Familiarity with Office 365 and Microsoft Windows operating systems and a wide range of security technologies, such as network security appliances, identity and access management systems, anti- malware solutions, automated policy compliance, logging and filtering tools, and desktop security solutions.
Knowledge of network infrastructure, including routers, switches, firewalls and associated network protocols and concepts.
Familiarity with router and firewall operations and maintenance.
Ability to interact with personnel at all levels and across all business units / organizations, and to understand business imperatives.
Understanding of core internet protocols (e.g., TCP/IP, DNS, SMTP, HTTP, etc.)
Experience working with security tools such as SIEM, vulnerability scanning, laptop data encryption, endpoint data protection, Data Loss Prevention and Classification, application pen testing, WAFs.
Experience with Linux is a plus
An undergraduate degree is required, preferably engineering related.
Additional Qualifications

Proven trustworthiness and history of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating well.
Analytical and problem-solving mindset.
Highly organized and efficient.
Education Requirements

A Bachelor’s degree is required, preferably in an engineering related field.
Experience Requirements

3-4 years of IT and network security experience
Certification Requirements

Preferable, but not required: CISSP

Reference : Information Security Engineer jobs

» Apply now