SR Security Engineer

ABOUT DATASCAN

Senior

DUTIES AND RESPONSIBILITIES:

• Has a well-developed understanding of current and evolving threats, contributes to 
• threat research and security strategy.
• Is responsible for the security system design and implements enhancements as needed.
• Supports the organization's cloud infrastructure in AWS & Azure, ensuring its security and compliance with best practices while collaborating with other teams to integrate security throughout the entire infrastructure.
• Analyzes attacker TTPs from security events in a diverse network of security devices and end-user systems.
• Performs regular system tests and helps monitor network security.
• Designs and oversees role-based access to IT systems.
• Assists in establishing disaster recovery procedures and conducting security drills.
• Helps develop and maintain Incident Response (IR) plans and playbooks.
• Supports response to security incidents and post-event analysis.
• Communicates effectively and collaborates with other teams to integrate security throughout the organization's infrastructure.

QUALIFICATIONS:

• Bachelor’s degree in information technology/security and 3-5 years of experience in the IT/Information Security field, or an equivalent combination of education and experience.
• Understanding of Information Security and IT Risk Management.
• Familiarity with current IT risks and security solution implementation.
• Supports in the design of security systems, recommends enhancements to senior technical peers. 
• Analyzes attacker tactics, techniques, and procedures (TTPs) from security events in a diverse network of security devices and end-user systems.
• Responds to security incidents, provides post-event analysis.
• Basic project management skills and progress reporting.
• Ability to interact with diverse personnel to support security measures.
• Skill in planning, organizing, and prioritizing workloads.
• Good written, verbal communication, business acumen, and commercial outlook.
• Any of the following certifications is a plus: Security+, CEH, CISSP, CISM, CCSP, CCSK, GCIH, GCIA.

ATTITUDINAL COMPETENCIES:

• Analytical - Synthesizes complex or diverse information; Collects and researches data; Uses intuition and experience to complement data; Designs work flows and procedures.
• Business Acumen - Understands business implications of decisions; Displays orientation to profitability; Demonstrates knowledge of market and competition; Aligns work with strategic goals.
• Innovation - Displays original thinking and creativity; Meets challenges with resourcefulness; Generates suggestions for improving work; Develops innovative approaches and ideas; Presents ideas and information in a manner that gets others' attention.
• Communication and Presence – Clear and effective communication, both verbal, written, and presentation with various teams, vendors, customers, and multiple levels of stakeholders.
• Planning/Organizing - Prioritizes and plans work activities; Uses time efficiently; Plans for additional resources; Sets goals and objectives; Organizes or schedules other people and their tasks; Develops realistic action plans.
• Drive for results – Analytical thinking and creativity to identify and address complex challenges with creative problem solving. Focusing on potential risks and the ability to develop and implement strategies to mitigate them. 
• Strategic Thinking – Capacity to develop and implement long term strategies that align with the company’s vision and objectives. 

TECHNICAL COMPETENCIES:

• Foundational Technical Skills - Assesses own strengths and weaknesses; Pursues training and development opportunities; Strives to continuously build knowledge and skills; Shares expertise with others.
• Network Security – Networking fundamentals, firewalls, intrusion detection systems, access control, VPN’s. 
• System Security – Data protection, hardware security, endpoint protection.
• Incident Response – Understands the core stages of the incident response lifecycle (preparation, identification, containment, eradication, and recovery. 
• Cyber Technologies – Kali Linux, AWS, Azure, SIEM’s, SOARS, Sentinel One, Wiz, Azure Defender, Palo Alto, Imperva, Darktrace, or experience with similar tools preferred.
• Operating Systems – Windows OS, MacOS, Linux OS
• Application Security – Secure coding practices, and patch management
• Vulnerability Assessments – Identification, Risk assessments, reporting, and mitigation of vulnerabilities. 
• Governance – Risk management and regulatory compliance knowledge

COMPENSATION & BENEFITS 

Compensation and benefits include:

• Competitive compensation
• Bonus potential based on satisfactory performance.
• Flexible health insurance options, including vision and dental coverage.
• 401(k) retirement savings plan, including company contributions
• Wellness incentives
• Paid Parental Leave
• Education Reimbursement

Check us out on Facebook

: DataScan | Alpharetta GA | Facebook