IT Security Operations Engineer Tech Lea

IT Security Operations Engineer Tech Lead

Position Description

The Tech Lead, IT Security Operations Engineer supports the Manager, Information Security Operations, IT departments, and Risk Management by researching technologies, remediating security vulnerabilities, oversight of system patching, and conducting security oversight functions. The Tech Lead, IT Security Engineer is responsible for understanding a variety of technologies in place at Ent, as well as the regulations and guidelines which drive security requirements for the organization.

The Information Technology department exists to provide exceptional service to our employees and ultimately to our members through high quality/high value technology solutions. We are a trusted partner with each of our business units. We will provide our business units with innovative cost effective solutions that are accurate, consistent, and timely. We will work together to achieve department objectives. We will be professional in our interactions with our customers (Ent employees) and our members. Finally, we will be concise, courteous, and accurate in our communications.

Essential Job Duties and Responsibilities

Security Tool Optimization / Sustainability

• Provides support and expertise to projects that require security expertise
• Typically consults to project teams addressing projects of moderate size and complexity and where the security issues are clearly evident and can be addressed using various approaches
• Proactively uncovers needed process improvements / automation and recommends ideas to contribute to the development of security solutions

Daily IT Operations Security

• Analyzes, monitors, and acts on information from enterprise security tools
• Diagnoses security issues that may involve extensive analysis. Recommends resolutions to management
• Prepares the analysis and reporting of security activities to management

Tech Team Lead / Subject Matter Expert

• Researches opportunities to improve IT security architecture
• Effectively contributes to the development of controls and processes improving information security services
• May provide security expertise across multiple technical platforms
• Provides technical guidance to more junior staff

Other duties as required

Minimum formal education required for this position

Knowledge consistent with a Bachelor’s Degree in Computer Science, Information Technology, or related field.

Each year of relevant work experience may be exchanged for a year in a relevant degree program or vice versa. For example, a requirement of “Knowledge Consistent with a Bachelor’s Degree in Accounting and 2+ years’ of accounting experience” could be substituted for a High School Diploma and 6 years of relevant accounting work experience or a Master’s Degree in Accounting and 0 years of work experience.

Minimum work experience

• 6+ years’ related IT Security Administration experience with in-depth work on multiple Security Platforms
• (Preferred) 2+ years’ financial industry security related administration

Technical or specialized knowledge/skills

• Possesses a strong working knowledge of security principles, policies, tools, and procedures along with an understanding of the overall technical architecture of the organization
• Responsible for integration of standard and non-standard logs into log management solution
• Strong knowledge of Security Tools, SIEM tool, and an Anti-virus Tool, Email Security, and DLP
• In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, and risk management.
• Proficient in Incident Management and Response
• Ensure incident identification, assessment, quantification, reporting, communication, mitigation, and monitoring.
• Follows standard procedures to follow up on security incidents, collecting and reporting appropriate information.
• Knowledge of Cloud products and Cloud Security
• Experience with security device management
• Demonstrates good understanding of the financial services industry
• Maintains strong working knowledge of various business areas and the security applications that support it.
• Follows standard procedures to follow up on security incidents, collecting and reporting appropriate information.
• Ability to handle high pressure situations with key stakeholders
• Can assess the tradeoffs between business needs, technology requirements and costs
• Strong communication skills (written, verbal, and listening)
• Good Analytical skills, Problem solving and Interpersonal skills
• Proficient in preparation of reports, metrics, dashboards, and documentation
• Demonstrated knowledge of data standards for data transmission, storage, PCI, and PII
• Ensure compliance to SLA, process adherence and process improvement to achieve operational objectives

Certifications required

• Security + certification or other security related certification approved by Management
• (Preferred) Certified Information Systems Security Professional (CISSP)
• (Preferred) Two additional certificates specific to security tools or security concepts

Certifications Preferred

None

Environmental, physical and psychological requirements

Must be able to sit or stand for prolonged periods of time in a climate controlled environment. Must be able to use fingers, hands, wrists for repetitive tasks such as typing, using a mouse, handling paper, currency, or coin, and operating a telephone. Demands for visual and auditory acuity are typical of an office environment. Must be able to interact via email, telephone, or in person with diplomacy, tact, and courtesy with all members under varying circumstances. Must be able to lift up to 40 lbs.