What are the responsibilities and job description for the Sr. Information Security Engineer position at 4A-Consulting?
Job Details
Job Title: Information Security Engineer III
Experience Required: 5 years
Job Summary:
We are seeking an experienced Information Security Engineer III to play a crucial role in defining, implementing, and maintaining security measures across high-level applications, networks, and systems. This position requires adherence to security plans, Office of Management and Budget (OMB) regulatory directives, and Federal Government information security policies. The ideal candidate will have extensive experience in security infrastructure, compliance, and user awareness training.
Key Responsibilities:
Security Requirements & Compliance:
- Define security requirements for enterprise-level applications, networks, and systems.
- Ensure adherence to security plans, OMB directives, and federal information security policies.
- Respond to audits and ensure compliance with security standards, policies, and procedures.
Security Architecture & Implementation:
- Design, develop, and implement security solutions to protect information system assets.
- Gather and organize technical information to align security measures with the organization’s mission and goals.
- Install, configure, and maintain security infrastructure, including RSA servers, firewalls, intrusion detection systems (IDS), and virtual private networks (VPNs).
Security Tools & Technologies:
- Provide in-depth knowledge and expertise in various security tools and technologies, such as Public Key Infrastructure (PKI).
- Monitor and assess emerging security threats and recommend countermeasures.
User Awareness & Training:
- Conduct security awareness training for employees to promote best practices and policy adherence.
- Develop educational materials and training programs to ensure compliance with security standards.
Incident Response & Risk Mitigation:
- Investigate security incidents and coordinate responses to mitigate potential threats.
- Collaborate with cross-functional teams to improve security posture and implement risk management strategies.
Qualifications & Requirements:
- Experience: Minimum 5 years of experience in information security engineering or a related field.
- Technical Expertise: Strong knowledge of firewalls, IDS, VPNs, RSA authentication, PKI, and security compliance frameworks (e.g., NIST, FISMA, FedRAMP).
- Compliance & Regulatory Knowledge: Familiarity with OMB directives, federal security policies, and industry best practices in cybersecurity.
- Communication Skills: Ability to train and educate users on security best practices and policies.
- Problem-Solving: Strong analytical and troubleshooting skills to address security risks and vulnerabilities effectively.
