What are the responsibilities and job description for the Sr. Security Engineer position at Elevate?
Job Summary
The Senior Security Engineer plays a critical role at Elevate. This role will provide security leadership in the implementation, maintenance, monitoring, and troubleshooting of a broad range of controls at Elevate. The Senior Security Engineer also serves as a consultant to internal and external customers in maintaining security for Elevate and its products. The Senior Security Engineer provides technical direction and support to less experienced members of the team and to other teams who require security expertise.
Essential Functions
- Serve as information security subject matter expert and actively assist or lead Elevate teams in the development of secure business solutions for medium to highly complex problems.
- Perform security risk assessments and lead remediation efforts.
- Analyze audit findings and make recommendations to lower risk to acceptable levels.
- Consult, advise, and approve secure network design.
- Ensure that security changes comply with company change management policies and procedures.
- Author security policies, procedures, standards, and guidelines.
- Automate security processes and tasks to achieve efficiency and/or improved accuracy.
- Maintain and proactively improve common security control practices such as: OS patching and hardening, intrusion detection (network, anti-malware), logging, and data loss prevention.
- Promote policy adherence and security best practices through awareness training and coaching.
- Support or lead information security incident response as required.
- Perform additional duties as assigned.
Education and Experience
- Strong background working with security technologies: firewalls, intrusion detection, anti-virus, vulnerability scanning and remediation, security log and event management, network traffic analysis, privilege management, etc.
- 7 years of technical IT experience, 4 years working as a security engineer or similar
- Working knowledge of enterprise cloud security principles and technologies, preferably Azure.
- Working knowledge of Microsoft Sentinel or similar system, highly preferred.
- Knowledge of regulatory compliance standards used in financial industry (e.g., PCI, GLBA, SOX, SAS70)
- Strong understanding of LAN, WAN, and wireless communications and protocol, including network packet analysis and routing protocols
- Strong knowledge of Linux and Windows operating systems as well as supporting technology (Active Directory)
- Experience in having 'ownership' over a security technology with a proven record for improvement of the technology.
- Experience in overcoming technical and soft skill challenges to achieve project deliverables.
- Scripting knowledge for automation of tasks (such as Python, PowerShell, KQL, PowerApps, etc.)
- Security certifications (E.g., CISSP, CISM, SCCP, CCSP, etc.) preferred, technology-specific certification (Azure, Microsoft, other tool certification), optional.
- Bachelor's degree in computer science or similar field of study, optional.
California Employee Privacy Policy | Family & Medical Leave Act | Employee Polygraph Protection Act |E-Verify
#LI-BJ1
