Security Engineer

Procom is a leading provider of professional IT services and staffing to businesses and governments in Canada.

With revenues over $500 million, the Branham Group has recognized Procom as the 3rd largest professional services firm in Canada and is now the largest “Canadian-Owned” IT staffing/consulting company.

Procom’s areas of staffing expertise include:

1. Application Development
2. Project Management
3. Quality Assurance
4. Business/Systems Analysis
5. Datawarehouse & Business Intelligence
6. Infrastructure & Network Services
7. Risk Management & Compliance
8. Business Continuity & Disaster Recovery
9. Security & Privacy

1. Contract Staffing (Staff Augmentation)
2. Permanent Placement (Staff Augmentation)
3. ICAP (Contractor Payroll)
4. Flextrack (Vendor Management System)

Job Description

Security Engineer

On behalf of our client, Procom Services is searching for a Security Engineer for a contract opportunity in New Jersey City, NJ.

Security Engineer Job Details

Appropriate candidates should possess at least 3-7 years’ experience in a Security Operations role as part of a Managed Security Services offering. We are looking for candidates who can provide a well-rounded knowledge and experience base in incident response and security event analytics. An overall flexibility and willingness to work under unpredictable time and project variables is essential.

Key responsibilities:

1. Coordinate escalations to internal support teams to ensure timely delivery of incident resolutions
2. Provide operational management of various security toolsets including Bluecoat, Q-Radar, Qualys, Rapid 7, and FireEye.
3. Perform vulnerability scans, remediation oversight, reporting and metrics for managed infrastructure
4. Update and maintain policies, schedules and scan parameters for vulnerability scanning tools.
5. Maintain schedules, reporting requirements, and oversight for scanning requirements including threat assessments using industry standard vulnerability risk assessment standards.
6. Provide awareness and training to personnel and external customers regarding threats, vulnerabilities and overall risk.
7. Ensure that Service Level Agreements are met
8. Maintain standard operating procedures, processes and guidelines for security operations, threat, vulnerability and malware mitigation.
9. Automate security analysis, administration and remediation procedures, workflows and tasks
10. Maintain awareness of trends in security regulatory, technology, and operational requirements
11. Participate in client audits

Education or Experience:

1. Graduation with a degree from a recognized university with specialization in Computer Sciences or a related discipline, combined with a minimum of (3) years of directly related practical experience and demonstrated ability to carry out the functions of the job.
2. OR Completion of two years of an acceptable post-secondary educational program in Computer Sciences from a recognized community college, or in a related discipline, combined with a minimum of (5) years of directly related practical experience and demonstrated ability to carry out the functions of the job.
3. OR Minimum of (7) years of directly related practical experience within the last eight years, and demonstrated ability to carry out the functions of the job.

Security Engineer Mandatory Skills

1. Experience using various vulnerability scanning toolsets including but not limited to Nessus, nCircle, Critical Watch, Qualys, and IP360
2. Experience with traditional and advanced malware mitigation toolsets including but not limited to McAfee Virus Scan Enterprise, Symantec Norton Antivirus, FireEye, Palo Alto Wildfire, and Trusteer.
3. Knowledge and experience with compliance requirements relating to PCI, SOX, etc.
4. Experience working in IT Security Operations, using SANS methodology
5. Experience and extensive knowledge of Security Information Event Management
6. Experience in Intrusion Detection or Prevention Systems
7. Knowledge of TCP/IP, computer networking, routing and switching
8. Experience in Linux/UNIX and Windows based devices at the System Administrator level
9. Strong troubleshooting, reasoning and problem solving skills
10. Organizational skills and the ability to work autonomously with attention to processes
11. Ability to speak and communicate effectively with peers, management and clients
12. Ability and experience in writing clear and concise technical documentation
13. Ability to speak and write fluently
14. SIEM experience
15. Experience in security penetration testing
16. Experience using ticketing systems such as Remedy
17. Security certifications: SANS/GIAC (GCIH, GCIA or GCUX), CCNA, CISSP, or CISA certifications would be assets
18. Knowledge of application security including web applications, web services, XML, SOA, AJAX, JSON, and web scanning tools
19. Knowledge of Strong Authentication, End Point Security, Internet Policy Enforcement, Firewalls, Web Content Filtering, Database Activity Monitoring (DAM), Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Identity and Access Management (IAM) solutions
20. Knowledge of NIST, PCI, HIPAA

Security Engineer Start Date: ASAP

Security Engineer Assignment Length: 3+ months

Additional Information

All your information will be kept confidential according to EEO guidelines. Please send your resume in Word format only.