Senior Security Engineer - First Pro
Philadelphia, PA
About the Job
The Sr. Security Engineer will work in conjunction with a team of IT operations professionals to ensure our data, computer systems, and infrastructure are secure through analysis, testing, and investigation. The Sr. Security Engineer will take a lead role in performing necessary installations, upgrades, and improvements for current cybersecurity infrastructure.
Primary Responsibilities:
Primary Responsibilities:
- Collaborate with the Information Technology leadership to develop and update strategy to support security architecture
- Partners with various business groups to ensure security best practices are followed in the design and implementation of new projects
- Administers vulnerability management platform, including configurations, vulnerability scanning, reporting, and endpoint agent updates
- Administers EDR platform, including event investigations, alert and report design, policy configurations, and endpoint agent updates
- Works with Cloud Engineer and Operations staff to ensure Microsoft cloud design and implementation follow security best-practices
- Conducts regular audits to ensure EDR and vulnerability scanning applications are installed and functioning as expected
- Monitors SIEM and Microsoft Azure environment for evidence of current or previous security events, as well as, performs improvements to Splunk alerts, reports, and dashboards
- Leads incident response in cases of confirmed security incidents, including minimization of business impact, communication of findings and mitigation, forensics collection, and hardening recommendations
- Monitors outside threat intelligence sources for both general industry and the legal industry and makes recommendations
- Works with technical operations teams to ensure security controls such as firewalls, MFA, and NAC functioning as expected
- Prepares reports of security performance metrics, events, incident findings, and other security related outputs
- Works with Risk and Audit teams to ensure all relevant certification tasks and client inquiries are addressed in a timely manner
- Bachelor's degree preferred
- Current security certifications preferred
- 3 – 5 years of work experience as a security analyst or information security engineer
- Hands on experience in security software and systems including firewalls, intrusion detection systems, anti-virus/EDR software, identity monitoring solutions, authentication platforms, log management , web-content filtering platforms, and vulnerability management systems
- Splunk, Crowdstrike, and Qualys software experience preferred
- Azure cloud security experience is a plus
- Ability to work in complex IT environments with minimal supervision and collaborate effectively with multiple teams in a dynamic environment
- Experience in project task planning, implementation, and documentation
- Strong communication skills
Source : First Pro