Onsite from day 1Location : Brooklyn, NY Description:
The job opening is for an experienced, hands on senior security engineer/architect that will design, configure, implement and support security controls in a growing enterprise environment. The security engineer responsibilities will include leading security projects involving LAN, WAN, IoT, OT, Office 365, Datacenter, Wireless, Cloud, endpoints etc.
Responsibilities:
- Architect security controls.
- Assess Active Directory security roles and policies
- Configure IDS/IPS security policies
- Configure security policies in Office 365, Web Proxy, CASB
- Troubleshoot level 3 security related issues.
- Architect and configure cloud security controls
- Monitor SEIM, Armis and Secureworks
- Configure security policies in DNS and WAF
- Examine current firewall policies and ensure completeness and accuracy
- Respond to security incidents
- Analyze the network and implement solutions to increase uptime efficiency and security.
- Work with vendors to integrate security platforms into infrastructure
Requirements:
- Minimum of 6 years Security Engineering experience
- NextGen911 Sr Engineer
- Strong Network Security experience
- Strong project management experience
- Must be able to lead projects
- Bachelor's degree in computer science, information technology or related field.
- Should be able to utilize security frameworks like NIST and MITRE.
- Strong knowledge of security management tools to facilitate troubleshooting, i.e. Wireshark, Netbrain, Extrahop, Netwitness etc.
- Strong understanding of cloud security
- Strong Identity and Access Management background
- Experience with configuring DNS. Familiarity with Infoblox to maintain public facing DNS services as well as IPAM
- Understanding of the various VPN technologies
- Knowledge of security of wireless environment including controllers and Client.
- Knowledge of resilient designs to ensure high availability
- Knowledge of IPS/IDS design as standalone hardware or as a feature within firewalls
- Understanding of IoT and OT security
- Ability to create reports using KRI and KPI
- Experience with Next Generation Firewalls including Cisco, Palo alto, Fortinet, Forcepoint, etc.
- Strong background in WAFs
- Work with vendors, carriers and other technical groups to implement new security controls and troubleshoot existing control