Responsibilities:

Your role as the Security Engineer will include platform Security Monitoring and Analytics; overseeing and performing Security Engineering tasks and functions; and developing and maintaining application security services for lab and production environments, which support number porting services for the NPAC (Number Porting Administration Center). In addition, the candidate will be responsible for securing existing systems and applications; evaluating the security for 3^rd party applications, host systems, development software, devices, and technologies for vulnerabilities; and developing requirements for related security solutions. Candidate must develop a thorough understanding of the solution (platform, application, and processes being developed and implemented) to fully meet the technical requirements of the position. 

In addition, you will have the following responsibilities: 

• Have the capacity to evolve to technical lead for the NPAC Security Operations team
• Maintain highly visible “hands on” profile
• Design and implement a continuous process improvement program for security engineering tasks
• Perform Security Monitoring using SIEM, HIDS and IPS
• Perform Security Incident Response Process (SIRP)
• SIEM rule parsing development and testing
• WAF Policy development, implementation, testing and maintenance
• HIDS alert development, testing and implementation
• Perform CCURE System Application Administration, Maintenance and Management
• Manage and Maintain Physical Security Devices – Cameras, NVRs, Card Readers and Door Controller
• Perform Security Threat Vulnerability evaluations and remediations
• Collaborate with, and serve as the technical security representative to other teams as needed to include, but not limited to: Operations, Product Engineering, Quality Assurance, Program Management, and Software Development
• Develop, enhance, and execute documented procedures for security related tasks, and ensure the overall availability of the security infrastructure
• Communicate with the executive team, the business clients and the implementation teams on status, experiences, lessons learned, and on-going needs

Skills and Qualifications:

• Bachelors in Computer Science, Information Management Systems and/or Cybersecurity or significant IT and Security work experience (5+ years)
• At least 5 years’ experience in designing, managing, or supporting data center or enterprise security systems and monitoring
• Security and IT certifications are a plus
• Experience with intrusion detection and protection systems, network security, segmentation, and management – SIEM, HIDS and IPS knowledge are a plus
• Knowledge and experience with Linux OS, Solaris OS, Windows OS, and Scripting (Python, etc.)
• Knowledge and experience with IT service and security operations and management
• Superb troubleshooting, problem determination and resolution skills required
• Ability to translate business and regulatory security requirements into product deployment and operational processes
• Experience designing and operating network security systems and controls for medium to large enterprises
• Previous participation in a complete, ground-up product deployment
• Strong organizational skills, attention to detail and the ability to handle multiple projects simultaneously while meeting deadlines
• Hybrid employees must live within 75 miles of the location in Richardson, TX
• US Citizenship Required
   

Responsibilities:
 

The Security Engineer role includes platform Security Monitoring and Analytics; overseeing and performing Security Engineering tasks and functions; and developing and maintaining application security services for lab and production environments, supporting number porting services for the NPAC (Number Porting Administration Center). In addition, the candidate will be responsible for securing existing systems and applications; evaluating the security for 3^rd party applications, host systems, development software, devices, and technologies for vulnerabilities; and developing requirements for related security solutions. Candidate must develop a thorough understanding of the solution (platform, application, and processes being developed and implemented) to fully meet the technical requirements of the position. 

 Some essential functions of the role include, but are not limited to the following:

• Must be available to support changes and maintenance windows, as needed and required (off-hours).
• Must be available to work in the Security 24 x 7 On-Call rotation and initiate escalation procedures to counteract potential threats/vulnerabilities.
• Assist with incident response and potential breach activities, on a 24x7 schedule, if necessary.
• Conduct security assessments to identify vulnerabilities in existing systems.
• Design and implement security measures to protect against potential threats.
• Develop, implement, and manage security policies and procedures.
• Test, evaluate, deploy, and configure security products and solutions.
• Administer and support security platform components including:  SIEM, HIDS, NIDS, FW, WAF, etc.
• Create and update SIRP response plans and lead incident response teams.
• Monitor system, network, and application activity for signs of unauthorized access or malicious activity.
• Perform security audits and risk assessments.
• Bachelor’s degree in computer science, computer engineering, or similar technical discipline or 6+ years of equivalent work experience.
• Hybrid employees must live within 75 miles of the location in Richardson, TX
• US Citizenship required

 General Skills and Qualifications:

• Information security engineering subject matter expert.
• Strong analytical and problem-solving abilities.
• Effective communication and collaboration skills to work with cross-functional teams.
• Analyze threats and attacks reported from multiple sources both internal and external.
• Knowledge of operating systems, virtualization, and database platforms.
• Operating systems: Enterprise Linux, Solaris, Windows.
• Virtualization: VMware, LDOMs, OVM.
• Scripting and /or development ability to integrate, enhance, or customize existing security tools.
• Oracle Database, security auditing and logging.
• Knowledge of network devices, security solutions, and technologies.
• Network, System, and Application event reporting and logging.
• Understanding configuration policy changes for router, switch, firewall, load balancing, updates, upgrades,  and lifecycle management.
• Expertise in configuring and managing firewalls, intrusion detection systems, and other security devices.
• ACL creation, update, and review.
• SIEM, event log processing, correlation, alarming, and reporting.
• WAF policy development and tuning.
• NIDS policy development and tuning.
• Endpoint monitoring and controls, FIM, HIDS, EDR.
• Application security review and assessments.
• Experience with vulnerability assessment and penetration testing.
• Vulnerability scanning, scan development and tuning, review and reporting, develop and support remediation plans.
• Manage penetration test engagements, review findings, and manage remediation efforts.
• Knowledge of security frameworks and industry best practices.

Additional Skills:

• Knowledge and/or experience with the following security applications are a plus – Wazhu, QRadar, Fortinet, CrowdStrike, QLIK, RedSeal, and Tenable Security Center/Nessus.
• Security Industry certification(s) preferred