Sr. Security Engineer

Overview:

Manages security operational systems responsible for threat monitoring, detection, and response. Leads efforts for vulnerability remediation and reduce overall risk. Responsible for a broad range of tasks including administration of information security tools and devices, security information and event management. Possesses and applies a broad knowledge of cyber security practices and procedures to complete assignments with integrity and creativity in collaboration with team. Anticipates job expectations and contributes to sustainable project solutions.

Responsibilities:

• Engineers, implements, and advocates for effective security operation standards and controls, including security monitoring, threat detection, incident response, threat intelligence, vulnerability management, access management, compliance and reporting
• Develops and implements a comprehensive vulnerability management program, and proactively identifies and analyzes emerging threats and vulnerabilities
• Leads efforts to remediate security weaknesses and improve overall security posture
• Leads incident response investigations, performs root cause analysis, and develops comprehensive incident reports
• Recommends and implements improvements to incident response processes and procedures while mentoring junior team members in incident handling techniques
• Leads the development, implementation, and maintenance of security documentation, including policies, standards, procedures, and guidelines
• Ensures documentation is aligned with industry best practices, regulatory requirements, organizational needs, and provides guidance and training to other team members on security documentation standards
• Develops and implements a comprehensive security reporting framework that aligns with business objectives and regulatory requirements
• Leads the creation of executive-level security reports, providing strategic insights and recommendations to senior management
• Oversees the development and maintenance of security dashboards and metrics to track key performance indicators (KPIs) and ensures that security reporting is accurate, timely, and relevant to the needs of the audience
• Develops and implements a comprehensive security awareness program that aligns with industry best practices and regulatory requirements
• Leads the creation of engaging and informative training content, including interactive modules, videos, and simulations
• Oversees the execution of phishing campaigns and analyzes results to identify vulnerabilities and improve training effectiveness
• Provides guidance and mentorship to junior engineers on developing and delivering security awareness training
• Provides expert guidance and advice to other IT teams on security architecture, design, and implementation