Security Engineer

Summary:

Responsible for assisting the Director of IT Security and Compliance with the security-related design, implementation, and support of Agua Caliente’s infrastructure and systems. Assists with ensuring that all technology platforms and systems are protected against threats and vulnerabilities while maintaining their overall integrity and security.

Essential Duties And Responsibilities (other Duties May Be Assigned):

• Assist with ensuring all technology platforms and systems are protected against threats and vulnerabilities while maintaining their overall integrity and security.
• Work with internal and external resources on designing, configuring, implementing, and troubleshooting I.T. Security applications and systems.
• Detect, investigate and respond to I.T. Security related incidents.
• Identify and define security requirements for operating systems and applications.
• Assist with the creation, development, and maintenance of I.T. security-related policies, procedures, and standards documentation.
• Participate in vulnerability detection and associated remediation efforts
• Ensures completion of regular reviews of system-generated security-log exception reports and compliance sampling of internal and regulatory policies, procedures, standards and controls.
• Ensure all systems operate in accordance with all applicable Tribal regulatory controls, federal standards (PCI, GDPR, CCPA, etc.).
• Maintain knowledge of current and emerging vulnerabilities, malware, infiltration techniques, forensics, and threats.
• Perform internal and external (vendors, contractors, consultants) vulnerability assessments to identify weaknesses and assess the effectiveness of existing controls.
• Assist with audit requests for documentation, responses and remediation.
• Assist with I.T. Security training and User Awareness Programs.
• Assist the I.T. teams with identifying and resolving I.T. security-related issues.
• Implement education and training programs on information security and privacy matters for team members and other authorized users.
• Develop, implement and maintain risk assessment, incident reporting and response systems, to address security breaches, policy violations and grievances from external parties.
• Participate in investigations of situations in which security may have been compromised and notify IT management of any unusual transactions impacting system security.
• Work closely with other IT security leadership on ensuring system enhancements do not compromise compliance requirements or security standards.
• Develop and maintain collaborative partnerships with all relevant internal departments as well as external vendors, regarding IT security-related information technology solutions.
• Keep abreast of the latest I.T. security and privacy legislation, regulations, advisories, alerts and vulnerabilities and develops implementation strategies to ensure the company’s security program and software remain current and secure.
• Provide outstanding customer service in a timely manner to both guests and fellow team members.
• Minimum of three years of I.T. security experience plus an additional 2 years of experience in I.T. security administration, server administration or network administration
• Industry certification (such as CompTIA Security , CySA , or similar) is highly desired.
• Experience with I.T. security systems, including firewalls, endpoint protection, SSO, authentication systems, MDM, log management, content filtering, remote access, etc.
• Experience with and understanding of the NIST Cyber Security Framework.
• Experience with multiple industry-leading security testing environments and tools, as well as, network assessment tools such as SIEM, Nessus, Tenable Security Center
• Working knowledge of Tribal compliance, regulations and standards preferred
• Problem-solving skills and the ability to work under pressure in a constantly evolving environment.
• Must have a reliable means of transportation
• Willing and able to work any and all shifts as assigned, including weekends and holidays
• Must possess excellent written and verbal communication skills. Must be able to communicate in English.
• Bachelor’s degree in computer science or information sciences from a four-year college or university, an equivalent combination of education and experience will be considered