The Security Engineer is a hands-on technical position and will be responsible for managing security infrastructure on the network and for maturing the overall security posture of the enterprise.
Responsibilities:
The Security Engineer will manage security infrastructure already in place such as IPS and security event correlation and response using a SIEM.
The Security Engineer will:
- manage the use of RSA Envision (SIEM) to assure that meaningful data is collected and correlated.
- manage the existing intrusion prevention infrastructure (Tipping Point IPS) and maintain up-to-date baselines for the secure configuration and operations of all in-place devices.
- document existing Processes & Procedures for IT Security.
- review logs and reports of security incident and event management devices. Interpret the severity and follow incident response plans for appropriate resolution. leads investigations for suspected security incident activity.
Qualifications:
- Experience commensurate with a senior-level resource, 5+ years.
- Set up and use of SIEM products to identify and act on security events (RSA Envision).
- Working knowledge and experience managing IPS devices (Tipping Point IPS).
- Providing guidance on remediation of identified vulnerabilities.
- Solid knowledge in of all core internet protocols (e.g., TCP/IP, DNS, SMTP, HTTP, etc).
- Strong written and verbal communication skills.
Desired Certifications:
#J-18808-Ljbffr