Information Security Engineer

#LI-Remote

Overview

The Information Security Engineer will take charge of implementing, configuring, and managing a comprehensive suite of security products while also performing day-to-day operational activities.

Partner closely with Architects, Governance, Information Technology, Development, and other business partners to ensure all of aspects of the Orders security initiatives align with security standards and regulatory compliance. Monitor network traffic, detecting intrusion attempts, identify trends, perform comprehensive security analysis, address potential security breaches or anomalies. Mentor and provide guidance to existing team members. Identify improvements in process, procedures, and configurations. Author documentation and diagrams as needed. Position is involved in all areas of Information Security and will have access to confidential information through privileged user accounts, audits, and other security efforts.

Core Responsibilities

• Implementation, integration, and support of security systems.
• Lead complex security projects.
• Perform comprehensive proof-of-concepts.
• Monitor environments for intrusions and track irregular system behavior and patterns.
• Support the development of, and adherence to, security standards and best practices.
• Maintain diagrams, procedures, and other operational documentation.
• Review existing tools, policies, and systems and make enhancement recommendations.
• Investigate security alerts, reported events, and perform incident response.
• Educate users about information security requirements, policies, and procedures.
• Secure Office 365 products, on-premises systems, and public cloud services.

Skills Qualifications

• A strong multifaceted technical background.
• Working experience with security systems including Firewalls, WAF, MFA, CASB, Content Filtering, NAC, DDoS, EDR, DLP, SIEM, IPS/IDS, and a like technologies.
• Working experience with security concepts/programs including Zero Trust, IAM, PAM, vulnerability management, encryption, PKI, application & web security, code review, incident response, and awareness training.
• Experience securing O365 and public cloud applications, data, and systems. 
• SOAR, scripting, PowerShell, or a like experience is not required by a plus.
• Familiarity with frameworks such as NIST 8000-53, CSF, ITL, COBIT, ISO2700x
• Proficient in Microsoft Office

Education

• Bachelor's degree or equivalent experience
• 5+ years of relevant security engineering and operations experience
• Certifications are not required, but a plus. Azure, AWS or other cloud security certifications. Other security related certifications such as CISSP, CISM, GSEC, or SSCP.

Compensation

The wage range for this role takes into account a broad array of factors that are considered in making compensation decisions, including but not limited to: skill sets; experience and training; licensure and certifications; and other business and organizational needs.  The range below applies as long as the work is performed in Connecticut; the Knights of Columbus reserves the right to adjust the wage range if the position is performed in another location.  At the Knights of Columbus, it is not typical for an individual to be hired at or near the top of the range for their role, and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $104,500 - 172,400.

Authorization to work in the United States is required.

This position is not eligible for visa sponsorship. 

Physical Demands