Information Security Engineer - Kforce Inc.

Kforce is hiring an Information Security Engineer to support our client's Global Security Services group, with a primary focus on implementing and operating on proactive defenses in Stamford, CT. Overview: The Security Engineer leverages extensive experience in information systems and security by closely working with Security and other IT practice leads to ensure our tools and agents are properly configured, fully deployed, and operating as expected. The role entails research, testing and implementation of new solutions and operation and maintenance of current solutions. The candidate must have strong hands-on technical background, and must demonstrate operational, engineering and security expertise at all layers of the OSI stack. This person must be able to efficiently diagnose and anticipate issues based on deep knowledge of the operating environment, standard technology stacks and operating systems, and acquired expertise in the subject security solutions. The candidate is expected to apply creative thinking and programming expertise to automate routine and recurring work. Specific Responsibilities:

• Strong conceptual thinking and communication skills - the ability to translate complex business and technical requirements into effective and comprehensible solutions
• Apply strong logic and principles-based reasoning to define solutions and justify proposals
• Work closely with other IT Engineers and staff to ensure that security solutions are implemented and operating as required
• Serve as lead Splunk/SOC engineer managing the SIEM(s) and related data flows
• Devise and implement means to provide transparency about health of security platforms and services
• Lead or support projects as required to implement new security solutions or upgrade incumbents
• Maintain deep expertise in the growing body of IT security vulnerabilities, threats, exploits and mitigations
• Serve as lead engineer supporting security infrastructures

Requirements:

• Bachelor's or Master's degree in Computer Science, Information Systems or other related field, or equivalent work experience
• Professional security management certification, such as a ISC (2) Certified Information Systems Security Professional (CISSP), SANS GIAC Information Security Professional (GISP), GIAC-Security Expert (GSE), or GIAC Certified Enterprise Defender (GCED)

Experience/Skills Required (5-10 years):

• Familiarity with NIST and ISO 27000 security practice frameworks
• Extensive hands-on experience with Splunk and other security infrastructures (e.g. Firewalls, IDS/IPS, Proxies, Micro segmentation)
• Extensive hands-on experience operating one or more common IT infrastructures (Telecom, database, Windows and *NIX systems, virtualization platforms)
• Proficiency with scripting / programming languages (e.g. Python, PowerShell)
• Familiarity with relevant international and U.S. regulations such as NYDFS, SOX, GDPR, DORA

The following are not essential, but are highly valued:

• Professional experience in application or infrastructure penetration testing
• Demonstrable expertise with configuration automation practices and toolchains (e.g. Chef, Puppet, Ansible, etc.)
• Demonstrable experience creating, securing and managing Cloud infrastructures (e.g. Azure, AWS)
• Familiarity with a relevant enterprise Architecture methodology (e.g. Zachman Framework, TOGAF)