IT SECURITY PRINCIPAL ENGINEER

JOB SUMMARY:

The IT Security Principal Engineer position is working within an IT security team to review, evaluate, design, engineer, implement, and maintain advanced security products, processes, and associated policies for the Corporation. The intended engineered solutions can represent IT security functions in areas such as threat and vulnerability management, networking, intrusion detection, application security, identity and access control, and risk management in support of IT security policies, processes, and standards. The IT security technical engineer also must support the continued monitoring, maintenance, and continual improvement of the IT security infrastructure. The person in this position will be a leader in the IT organization and considered a subject matter expert in the field of IT Security. This position requires advanced, hands-on security expertise and may require around-the-clock, 7 days a week support of security alerts within the QD IT infrastructure and applications.

JOB RESPONSIBILITIES:

1. Develops security strategies and solutions to improve, augment, and enhance the posture of IT Security.
2. Installs, upgrades, maintains, and supports a variety of security tools, including network scanners, application scanning, network and application access control, intrusion detection systems, data loss prevention products, and security incident and event management (SIEM).
3. Assists in the coordination and completion of applicable IT security SOPs.
4. Periodically reviews and modifies corporate IT Security standards and procedures as required by changes in technologies, business activities, and regulations.
5. Works with IT leadership to develop strategies and plans to enforce security requirements and address identified risks.
6. Acts as a subject matter expert around IT Security and provides technical guidance on IT projects.
7. Develops and maintains detailed knowledge of security products, tools, regulations, and best practices.
8. Reports to IT management concerning risk, vulnerabilities, and other security exposures, including misuse of information assets and noncompliance.
9. Plays a consultative role in application development and leads security role in acquisition/merger projects to assess security requirements and controls.
10. Collaborates on critical IT projects to ensure that IT security issues are addressed throughout the project life cycle.
11. Understands security policies, standards, processes, and procedures, and supports service-level agreements (SLAs) to ensure that security controls are managed and maintained.
12. Researches, evaluates, and recommends IT and information-security-related hardware and software, including developing business cases for security investments.
13. Assumes a highly visible technical project management role.
14. Maintains flexibility for occasional on-call availability as business need dictates given 24/7 business operation.
15. Manages relationships with key IT Security product and service vendors.
16. Provides engineering expertise in the delivery of assigned security products.
17. Works closely with Security architecture in the overall design and implementation of security solutions.
18. May represent security architecture if one is not assigned to an IT initiative.
19. Develops processes to migrate to IT Operations any security products where possible.
20. Represents IT Security to Senior IT Management and customers when appropriate.
21. Demonstrates in-depth knowledge and understanding of information risk concepts and principles.