What are the responsibilities and job description for the Senior Information Security Engineer position at Staffing Science?
This role is in Scottsdale AZ and is hyrbid on site
As a Senior IT Security Engineer, you'll play a crucial role in safeguarding our systems and ensuring compliance with industry best practices. This individual will take ownership of our security tools stack, ensuring it remains current, ubiquitous, and properly configured. You'll lead security projects around tooling, infrastructure, applications and cloud (AWS).
Responsibilities:
- Security Stack Ownership: Take charge of our security stack, including SIEM, EDR, NDR, VM, WAF, firewalls, email security, IAM, and more, aligning it with leadership objectives.
- Vulnerability and Incident Management: Drive our vulnerability and incident management processes to ensure compliance with security policies.
- Internal Support Services: Provide assistance to internal team members on security-related issues, fostering a culture of collaboration and support.
- Project Management: Lead the creation, prioritization, and execution of security projects, ensuring alignment with organizational goals.
- Documentation and Policy Maintenance: Ensure all work is thoroughly documented, and security policies and procedures are kept current.
- Audits and Reviews: Conduct audits and reviews, providing metrics and diagrams as needed to support compliance efforts.
- Security Education and Awareness: Contribute to the development of internal security testing and monitoring processes, educating stakeholders on evolving security technologies.
- Risk Assessment and Mitigation: Collaborate with IT and other departments to assess and address security risks, promoting a proactive approach to risk management.
- Continuous Learning: Stay abreast of emerging IT security technologies and trends, sharing knowledge and insights with the team to drive innovation.
- Compliance Support: Collaborate with internal compliance teams to address compliance mandates through policy development and process improvement.
- On-call Support: Participate in 24/7 on-call duties to support essential business clients and respond to emergencies.
Qualifications:
- Education: Bachelor’s Degree or equivalent related experience.
- Experience: Seven years in IT, with at least five years in IT Security.
- Technical Knowledge: Proficiency in security engineering, computer and network security, authentication, security protocols, and applied cryptography.
- Certification: CISSP certification or willingness to obtain within the first 6 months of hire.
- Process Adherence: Strong adherence to process and accountability to mitigate risk.
- Professional Traits: Demonstrated integrity, good judgment, honesty, and reliability.
- Continuous Improvement: Commitment to lifelong learning and skill enhancement, with a willingness to share knowledge with others.
- Customer Service: Dedication to providing excellent customer service to internal stakeholders.
- Collaborative Spirit: Ability to work effectively as part of a collaborative team, contributing to a positive and inclusive work environment.
