Job Description
As an Information Security Engineer, you will be responsible for ensuring the security and integrity of data, data systems, and data networks across the entire organization. This role will be responsible for day-to-day operations of the in-place security solutions along with the identification, investigation and resolution of security breaches detected by those systems. Duties include:
Oversee the processes, policies and supporting technologies to enhance the security posture of the company.
Work closely with the network infrastructure team to continuously improve processes and technologies to prevent and detect malicious software in the environment.
Monitor all in-place security solutions for efficient and appropriate operations.
Participate in the design and execution of vulnerability assessments, penetration tests and security audits.
Conduct annual risk assessments and business impact analyses to identify vulnerable areas within the company’s critical functions.
Conduct and participate in annual security tabletop and incident management exercises.
Lead investigations into unmitigated security incidents that are escalated beyond tier 1 support .
Prepare and respond to all IT audits with internal and external agencies.
Work closely with the Director of Software Development to enforce secure coding practices and conduct annual OWASP training with software development associates.
Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.).
Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.
Perform the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.
Occasional on-call support may be required.
Qualifications
Minimum 4 years of experience managing and/or directing an IT and/or security operation.
Experience in planning, organizing, and developing IT security and facility security system technologies
In-depth experience with network security devices such as firewalls, IDS/IPS, web application firewalls, Vulnerability Management and SIEM tools
Excellent knowledge of technology environments, including information security.
In-depth knowledge of applicable laws and regulations as they relate to security and compliance.
In-depth knowledge of all types of disasters, natural or otherwise, and their effect on company technologies.
Working technical knowledge of IT systems software, hardware, protocols, and standards.
Knowledge of applicable practices and laws relating to data privacy and protection preferred.
Certified Information Systems Security Professional (CISSP) or Equivalent
Bachelor’s degree in Computer Science or a related technology field or equivalent in comparable work experience within the security field
FULL BENEFIT PACKAGE INCLUDING MEDICAL, DENTAL, LIFE, COMPANY PAID SHORT/LONG TERM DISABILITY, 401(K), EDUCATIONAL ASSISTANCE AND MORE.
Find us on Facebook at facebook.com/Fortegra
Additional Information
All your information will be kept confidential according to EEO guidelines.