Job Seekers, Please send resumes to resumes@hireitpeople.comRequired Skills - Sr. Security Engineer, CISSP, database security, security design, development; complex security solutions, scripting.
Years of experience: 7-10 + years’ experience in the field.
Location: White Marsh, MD (a little north of Baltimore, MD)
Interviews: Phone and in-person interview will be required. Local candidates strongly preferred.
Visa details: US Citizen, or green card only.
JOB DESCRIPTION:
Essential Duties:
- Creates technical and programmatic assessments, evaluates engineering and integration initiatives and provides technical support to assess security policies, standards and guidelines.
- Defines company security requirements and reviews systems to determine if they have been designed to comply with established security standards; develops new standards as necessary.
- Develops, tests and operates firewalls, intrusion detection systems, enterprise anti-virus systems and software deployment tools.
- Participates in the planning, design, installation, and maintenance of security systems (Perimeter, IPS, DLP, AV, Malware, Patching, DDoS) in support of security policies; works with IT staff and business units to assess risk and address security issues.
- Implements, enforces and communicates security policies and/or plans for data, software applications, hardware and telecommunications.
- Validates and tests security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.
- Monitors compliance with IT security policy, and coordinates investigations and reporting of security incidents.
- Reviews and recommends the installation, modification or replacement of hardware or software components and any configuration change(s) that affects security.
- Leads development, testing and QA functions to ensure that projects are securely delivered and fulfill expectations.
- Ensures the system support team receives and maintains security awareness and training.
- Builds and maintains relationships with teams and third parties on security development and support issues.
- Provides highest level of technical consultancy to ensure problem resolution is achieved in the shortest possible timeframe. Additional duties and responsibility may apply.
Education/Qualifications:
- Bachelor’s degree in a related discipline (Computer Science, Information Systems Management, Engineering, or similar).
- CISSP certification required.
- Seven (7) to Ten (10) years of security engineering experience, specifically in database security and security design and development; extensive expertise in developing complex security solutions is required.
- Previous Network Engineering or Systems Engineering background preferred.
- Experience using scripting languages to automate tasks and manipulate data; programming experience is a plus.
- System administration experience in a Windows and Unix environment.
- Experience securing web applications and a strong understanding of web application design, function, and Secure Software Development Lifecycle.
- Experience developing technical diagrams with tools such as Microsoft Visio.
- In depth understanding and working knowledge of OWASP top 10.
- Experience with all aspects of high availability fault tolerant architectures.
- Ability to explain complex ideas and concepts to both a technical and nontechnical audience, in English verbally and in writing.
- Passion for providing excellent customer service.
- Ability to work in a fast-paced environment; ability to multi-task, change direction, effectively prioritize, and meet deadlines.
- Ability to occasionally adjust work schedule to meet business needs (standard forty (40) hour week, with occasional after hours and weekend requirements).
- Ability to work effectively with both local and remote staff, teammates and managers.
Skills |
# Years Used |
Year Last Used |
Overall IT exp. (7-10 + yrs.) |
|
|
Education: |
|
|
Certifications: CISSP certification required. |
|
|
Bachelor’s degree in a related discipline (Computer Science, Information Systems Management, Engineering, or similar). |
|
|
Seven (7) to Ten (10) years of security engineering experience, specifically in database security and security design and development; extensive expertise in developing complex security solutions. (Required 7-10 yrs. +). |
|
|
Previous Network Engineering or Systems Engineering background preferred. (Highly desired) |
|
|
Experience using scripting languages to automate tasks and manipulate data; programming experience is a plus. (Highly Desired) |
|
|
System administration experience in a Windows and Unix environment. (Required) |
|
|
Experience securing web applications and a strong understanding of web application design, function, and Secure Software Development Lifecycle. (Required) |
|
|
Experience developing technical diagrams with tools such as Microsoft Visio. (Required) |
|
|
In depth understanding and working knowledge of OWASP top 10. (Required) |
|
|
Experience with all aspects of high availability fault tolerant architectures. (Required) |
|
|
Ability to explain complex ideas and concepts to both a technical and nontechnical audience, in English verbally and in writing. (Required) |
|
|
Passion for providing excellent customer service. (Required) |
|
|
Ability to work in a fast-paced environment; ability to multi-task, change direction, effectively prioritize, and meet deadlines. (Required) |
|
|
Ability to occasionally adjust work schedule to meet business needs (standard forty (40) hour week, with occasional after hours and weekend requirements). (Required) |
|
|
Ability to work effectively with both local and remote staff, teammates and managers. (Required) |
|
|