Information Security Engineer II - Reliance, Inc.

:

Job Summary:

The Information Security Engineer II will play a crucial role in safeguarding the company's assets and ensuring the confidentiality, integrity, and availability of our information systems and data. The Information Security Engineer II will play a pivotal role in the design, implementation, and maintenance of multiple security solutions. In addition, the Information Security Engineer II will work closely with other teams to promote secure designs and practices across the company to mitigate risks and meet business objectives and regulatory requirements.

Physcial Requirements:Stand or Sit(Stationary position), Walk(Move, Traverse), Use hand/fingers to handle or feel (Operate, Activate, Use, Prepare, Inspect, Place, Detect, Position), Climb (stairs/ladders) or balance (Ascend/Descend, Work atop, Traverse), Talk/hear(Communicate, Detect, Converse with, Discern, Convey, Express oneself, Exchange information), See (Detect, Determine, Perceive, Identify, Recognize, Judge, Observe, Inspect, Estimate, Assess), Reaching, Repetitive MotionFunction in the Job:Sedentary Work- Exerting up to 10 pounds of force occasionally, and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.Job Function:

Security Roadmap – Ability to guide the organization in the development of the Security Program Roadmap.

• Contribute to the development of the Security Program Roadmap
• Develop an understanding of the organizational risk profile, organizational threats, and 3rd party compliance requirements

Security Engineering - Architects and implements security technologies.

• Assist with identifying potential security technologies and researching their capabilities.
• Contributes to the design and implementation of security solutions
• Contributes to identifying migration / upgrades for end-of-life technologies
• Recommend security improvements to management
• Administer security tools and troubleshoot issues that arise

Threat Management - Ability to understand security threats and their risk to the organization.

• Contribute to the research of new and existing security threats and provide input to their potential risk to the environment
• Understands the anatomy of a breach and provides assistance with investigations

Security Governance - Establish and maintain self-audits, policies, and procedures to provide assurance that information security strategies are aligned with applicable laws and regulations through adherence to internal controls.

• Propose areas for "self-audits" based on security assessments and/or new technology deployments
• Propose security policies or procedures based on security assessments and/or new technology deployments

SUPPLEMENTAL DUTIES

• Serve as technical liaison with vendors
• Pursues training and development opportunities; strives to continuously build knowledge and skills
• Assist personnel in other technology departments to resolve technical and/or application issues
• Participate and assist in the coordination of both internal and external audits
• Other duties as requested

CORE COMPETENCIES

Problem Solving - Ability to problem solve through problem identification (what is the problem), solution assessment (what can be done), problem documentation (document for future) and problem response (implementing a solution).

   Able to:

• Frame problems before trying to solve them
• Seek advice from those who have solved similar problems
• Follow up to ensure that the problem has been resolved
• Document and disseminate identification and resolution of problems to avoid future redundant work efforts
• Break down problems and identify all of their components
• Provide insight into the root-causes of problems
• Anticipate problems and is proactive in addressing them

Decision making - Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals.

   Able to:

• Gather data and others' input when making decisions
• Consider lessons learned from experience, differing needs, and the impact of the decision on others
• Escalate decisions when appropriate
• Balance analysis, insight, experience, and perspective when making decisions
• Find solutions that are acceptable to diverse groups with conflicting interests and needs

Customer Service - Ability to develop and maintain strong relationships with customers by listening, understanding and responding to their needs.

   Able to:

• Provide service to internal and external customers to satisfy their needs and expectations
• Listen to concerns and resolve reported issues effectively and promptly
• Ensure and comply to customer response timeline (SLAs) based on the severity of reported issues including documenting concise and accurate status information in the Service Now ticketing system
• Commit to continuous improvement
• Anticipate customer’s needs and move to effectively address issues
• Establish relationship with customers providing education as appropriate
• Deliver high quality solutions

Building Collaborative Relationships - Develops, maintains, and strengthens partnerships with others inside or outside the organization.

Able to:

• Establish rapport with co-workers easily
• Work with others to achieve goals
• Listen and respond constructively to other team members' ideas
• Encourage and facilitate cooperation, pride, trust and group identity
• Foster commitment and team spirit
• Offer support for others' ideas and proposals
• Be open with other team members about his/her concerns
• Share his/her expertise with others

Accountability - Holds self-accountable for measurable high-quality, timely, and cost-effective results.

Able to:

• Facilitate between own functional area and areas below or above in the work stream as needed
• Set well-defined and realistic goals
• Comply with established policies and procedures
• Accept responsibility for mistakes
• Take ownership of successful outcome of work assignments/projects through collaborative efforts with team
• Minimize re-work
• Seek out learning opportunities
• Identify training needs and take action to obtain knowledge
• Persistently push self and others for results
• Collaborate between own functional area and areas below or above in the work stream needed
• Help others
• Persistently pushes self and others for results
• Provide consistency between projects
• Display initiative, effort, and commitment towards completing assignments

Company Business Knowledge - Understands the company, its products and the business processes.

Able to:

Understands Reliance business and how technologies can support business processes.

 

Communication - Ability to communicate effectively across all levels to support departmental and organizational objectives.

Able to:

• Clearly express information taking into account audience and nature of the information (for example, non-technical, sensitive, and controversial)
• Ask questions and summarize what was heard to prevent miscommunication
• Present information in a concise and focused manner
• Listen to others
• Communicate written information (for example, facts, ideas, or messages) in a succinct and organized manner
• Produce written information, which may include technical material that is appropriate for the intended audience

Leadership – Displays effort and commitment in carrying out the department’s goals and objectives.

Able to:

• Act in a proactive and achievement-oriented manner
• Treat co-workers in a fair and equitable manner
• Behave in a tactful, compassionate, and sensitive manner
• Empower others by sharing information
• Actively listen and clarify information as needed
• Foster an atmosphere of open communication

Required Skills:

• Bachelor’s Degree or equivalent work experience in a related field required
• 3+ years’ experience in an Information Security role with responsibilities in assessing application and infrastructure architectures for security threats and vulnerabilities, strongly preferred
• Alternatively, 5+ years’ in a Senior level network/systems role with a strong focus on Security, required
• Must be self-motivated and able to work independently, with minimal supervision and as part of a team
• Hands-on experience with security infrastructures (e.g. Firewalls, IDS/IPS, VPN, Secure Email Gateways, Web Content Filters, Proxies, DLP, SIEM) required
• Solid foundational understanding of networking concepts required
• Professional security management certification, such as a ISC(2) Certified Information Systems Security Professional (CISSP), SANS GIAC Information Security Professional (GISP), CompTIA Security+, CompTIA Network+, highly desirable
• Knowledge and experience with common information security management frameworks and best practices, specifically the National Institute of Standards and Technology (NIST) frameworks and Center for Internet Security (CIS) Critical Security Controls, highly desirable
• Understanding of cloud security concepts (SaaS, PaaS, IaaS), mobile architecture, network and application security and/or data protection, preferred
• Experience implementing security concepts with at least one major IaaS vendor is preferred
• Detail oriented with excellent interpersonal communication skills
• Expected to effectively partner and collaborate with other teams on an ongoing basis
• Strong conceptual thinking and communication skills - the ability to translate medium complexity business and technical requirements into effective solutions
• Strong organizational skills and ability to multi-task in an enterprise business environment
• Ability to manage/track completion of multiple ongoing projects and remediation tasks
• Proficient technical documentation skills
• Strong written, verbal and presentation communication skills and ability to communicate at all levels within an organization

Compensation Range:The anticipated compensation for this position is USD $115,000.00/Yr. - USD $147,500.00/Yr. depending on experience, qualifications, and location.