JOB DETAIL

Job Information

Job Code:

ITS418

Level:

04

Job Title:

Engineer, Security

Reports To Position:

Director, Infrastructure Services

Department (Name / ID) :

IT (72)

Job Summary

The Security Engineer is responsible for ensuring the BDO’s network and information systems are protected from external and internal threats.  In this role, the Security Engineer is charged with engineering solutions and systems and building policies and procedures.

Job Duties

• Recommends and implements changes to enhance network and open systems security for BDO
• Protects network resources (LAN/WAN, telecommunications, and voice) against unauthorized access, modification, or destruction
• Performs day-to-day monitoring and management of intrusion detection and logging systems
• Collaborates with IT partners to create and execute the Firm’s technical strategy
• Partners with Infrastructure Services professionals to evaluate and recommend security patches for operating systems, network devices, and applications
• Coordinates with other departments inside BDO (such as Legal and Human Resources) to create and enforce policies and procedures related to information security
• Performs intrusion testing on corporate network, both external and internal, report findings back to upper management
• Provides assistance with establishing standards for hardware and software where there are implications to security (i.e., wireless access control)
• Reports security assessment metrics to upper management on a regular basis
• Collaborate with internal departments at BDO to communicate BDO’s security program to customers and prospects.
• Adheres to BDO and department policies and procedures
• Other duties as required

Supervisory Responsibilities:

• N/A

Qualifications, Knowledge, Skills and Abilities

Education:

• High school diploma/GED required
• Bachelor degree preferred

Experience:

• Five (5) years of experience providing IT systems security support required

License/Certifications:

• CISSP certification desired

Software:

• Demonstrated knowledge of (preferred):
• Packet capture and analysis – Wireshark or similar
• Security toolset software – Nexpose, Nessus, nMap, etc.
• Meta-directory technologies (Microsoft Active Director, LDAP)
• Basic functionality of Windows and Linux servers, workstations, and networks
• Microsoft Windows (server and workstation) relating to security & patch management
• Understanding of virus and malware detection & removal
• Open source or commercial vulnerability scanners
• Basic understanding of meta-directory technologies (Microsoft Active Directory, LDAP)
• Wireless technology (802.11n, 802.1x)
• Intrusion detection/prevention and threat management
• Encryption Algorithms(PKI/Kerberos/IPSEC/SSL)
  • Prior experience with networking technologies related to security such as Cisco IOS, Cisco ASA firewalls , IPSEC/SSL VPN technologies desired.  Other platforms (Fortinet, Palo Alto, Checkpoint) are acceptable as well.
  • Prior experience with Microsoft TMG or Forefront UAG servers or other reverse proxy solutions desired

Language:

• N/A

Other Knowledge, Skills & Abilities:

• Strong oral and written communication skills
• Excellent interpersonal and customer relationship skills
• Capacity to work in a deadline-driven environment while handle multiple complex projects/tasks simultaneously with a focus on details
• Capable of successfully multi-task while working independently or within a group environment
• Knowledge of data loss prevention (DLP)
• Familiarity with various regulatory policies (Sarbanes-Oxley, HIPAA, GLBA and other government imposed security imperatives) as they relate to data security and IT policies/procedures
• Basic awareness of PCI-DSS, ISO 2700x, FISMA, and other industry recommended security programs
• Basic understanding of security breach detection and mitigation
• Ability to rely on extensive experience and judgment to plan and accomplish goals
• Capable of working well under pressure while dealing with unexpected problems in a professional manner
• Capacity to communicate and interact with all levels of employees and management
• Ability to interact and build consensus among people
• Capable of reviewing and interpreting SSAE16 SOC2 reports, beneficial
• Ability to work after standard business hours and travel