Security Engineer H11-150 Job in Tampa, Florida Us
Under general supervision, provide security leadership and guidance in the area of Information Security. The position will also have operational responsibilities to administer, operate, and maintain various systems which monitor the security status of the environment. The position will be responsible for maintaining and improving key elements of the Enterprise Security Program, which includes but is not limited to supporting the enterprise-wide information security strategy through the implementation of security tools, processes, and procedures as well as operating existing tools and controls. The position will work with other Security associates within the Firm to ensure ongoing maturity of Enterprise Security. ESSENTIAL DUTIES AND RESPONSIBILITIES: Design, test, implement and support current and future security technologies in production and non-production environments. Assist with the complex environments. Identify and gather detailed security requirements within the project process. Understand security controls and applicability within security technologies and application to projects. Identify potential risks to data and systems. Support mitigation of these risks to acceptable levels. Interpret control requirements and ensure appropriate development and implementation of control activities. Provide security impact and expertise for information systems and business area projects. Develop, update and maintain Enterprise Security program documentation. Support internal and third-party risk assessments. Serve as security advisor to the Project Leader. Assist Project Leader to ensure appropriate security documents are identified and created and that all appropriate security deliverables are identified. Assist in implementation planning activities including security analysis and assessment. Perform advanced problem determination and timely resolution as well as make the decisions necessary to recover business systems in the event of an outage. Support proactive security monitoring of systems to ensure minimal system downtime and failure. Define recovery procedures to support recovery efforts. Define system configuration settings required for system hardening and security. Plan and provide leadership on various engineering efforts. May provide project Lead responsibilities on smaller operational projects. Assist in the mentoring and provide direction to Security Analyst team members. KEY SUCCESS INDICATORS/ATTRIBUTES: Demonstrate excellent interpersonal, technical, organizational skills and verbal written communication skills. Ability to quickly grasp new technologies and security risks in addition to recognizing industry trends. Ability to prioritize and multi-task in a fast paced, changing environment. Understand and can effectively work with assigned hardware software. Ability to maintain professionalism when interacting with internal and external customers. Strong analytical and problem solving skills. Ability to self-motivate and self-direct. Proficient personal computer skills including Windows and *nix systems. Commitment and adherence to Firm s Core Values. WORKING RELATIONSHIPS: KTS Leadership share and seek information, build consensus, support, convey findings, provide service. Corporate partners share and seek information, build consensus, partner, provide service. MSS interact with managed security service provider to response and process improvement. TRAVEL REQUIREMENTS:Ability to travel as needed (Up to 10%).
Bachelor's degree in Computer Science or Business and 5-7 years IT experience, with 3-5 years serving within a security analyst or engineering discipline, or equivalent combination of education, certification, and experience with two or more of the following: firewalls, IDS/IPS, data loss prevention, technical vulnerability management, wireless security, network access control, application security testing, and penetration testing. Required experience/skills:Fundamental understanding of multiple information technology disciplines including networking, operating systems, application development, and access controls. Understanding of information security and risk management frameworks such as COBIT and ISO 2700X. Security and risk assessments and documentation.