Security Engineer II

Job Summary

Design, implement, and ensure the safety of information systems assets, data and protect systems from intentional or inadvertent access or destruction. Interface with user communities to identify security needs and implement procedures based on findings. Communicate security policies and monitor compliance. Evaluate security level requirements

Principal Responsibilities

• Conducts security risk assessments and compliance audits and makes recommendations regarding levels of risk by identifying potential information and network security vulnerabilities.
• Develops, maintains and publishes policies and standards related to security software systems to mitigate risk and influence user behaviors.
• Implementation, administration, and compliance with all GIS data security programs and regulations including General Data Protection Regulations (GDPR)
• Enforces and monitors security related standards, procedures, techniques and guidelines.
• Provides technical guidance and consultation related to information security issues.
• Identifies intrusions into information systems and makes recommendations for improvements/changes based on findings.
• Investigates and recommends security technologies and solutions including data loss prevention, firewalls, encryption, intrusion detection, etc.
• Shares security knowledge with employees and the business.
• Manages the provisioning, de-provisioning and access levels of accounts for cybersecurity tools.
• Represents the team as a regional point of contact.
• Other duties as assigned.

Job Level Specifications

• Extensive knowledge and application of principles, theories and concepts. Complete knowledge of all job functions and the broad industry best practices, techniques and standards.
• Develops solutions to complex problems where analysis of situations and/or data requires in-depth evaluation of variables. Determine best approach to achieve results and provide suggestions to improve policies and procedures.
• Work is performed independently and requires the exercise of judgment and discretion. Exercises considerable latitude in determining objectives and approaches to assignments. Work may be reviewed at a high level.
• May represent the organization as a primary contact on assignments and/or projects. Interacts with senior professionals and management and frequently coordinates work between departments or organizations.
• Actions may impact the organization. Failure to accomplish work will result in the inability to reach crucial organizational goals. Erroneous decisions may have a prolonged effect resulting in the expenditure of substantial resources.

Distinguishing Characteristics

• Prior Tool Experience: Knowledge and experience with our toolset.
• Crowdstrike
• Cribl
• Netskope
• ArmorCode
• Problem-Solving Ability: Demonstrated capability to address complex security issues effectively and efficiently. Ability to think critically and adapt solutions to evolving security challenges.
• Communication Skills: Strong written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders and produce clear, concise reports.
• Team-Oriented: Collaborative mindset with the ability to work effectively within a global team and contribute to collective security goals while managing individual responsibilities.
• Industry certifications: such as CISSP, CASP, or GIAC are a plus.
• Relevant vendor specific certifications are a plus.

Work Experience

• Typically, 5+ years with bachelor's or equivalent.

Education and Certification(s)

• Bachelor's degree or equivalent experience from which comparable knowledge and job skills can be obtained.

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills.