Security Engineer

SHR Talent is partnering with a client in Nashville, TN in its search for a Security Engineer. The Security Engineer will be responsible for identifying and assessing internal and external threats to the enterprise as well as monitoring the network for malicious activity and assisting in investigating intrusions and other security related events.

To be successful in the role as the Security Engineer, you should be an expertise in threat hunting or offsec, have familiarity with identity governance tools and processes, demonstrate integrity and strong ethical standards, have experience with multiple computer systems and programs, and have sound decision-making abilities while solving problems proactively.

An ideal candidate for the Security Engineer role will possess logical thinking and analytical abilities, an aptitude in solving problems independently and as part of a team, a positive attitude and the ability to work and communicate effectively with all levels of the organization and be committed to learning better and more efficient ways to accomplish tasks.

Responsibilities:

• Assessing vulnerabilities of the network and network applications
• Analyzing security alerts to determine root cause
• Performs daily security monitoring
• Investigate major cyber threats while establishing procedures and processes that support the IT security infrastructure and operations
• Report, act, and document all incidents in a timely manner
• Maintain the Information Technology toolset
• Design, implement, and maintain security controls to safeguard systems, networks, applications, and data
• Automate security tasks to improve efficiency and effectiveness of security operations
• Conduct or participate in penetration testing and vulnerability assessments to proactively identify and remediate security weaknesses
• Participate in designing and implementing a secure IT infrastructure
• Develop and implement a vulnerability management program to ensure timely patching of security vulnerabilities
• Participate in developing incident response playbooks
• Investigate and evaluate security incidents
• Participate in on-call rotation
• Analyze security alerts, security logs, and network traffic
• Create and maintain dashboards to ensure security continuity
• Stay abreast of the latest cybersecurity threats, vulnerabilities, and industry best practices to enhance threat hunting techniques and methodologies
• Monitor threats utilizing logs and reports from various security tools

Qualifications:

• Bachelor's degree in computer science, Information Security, or related field, or equivalent experience, preferred
• Certifications such as Security+, Cisco Certified Network Associate (CCNA) Security, or Certified Information Systems Security Professional (CISSP), strongly preferred
• Experience with security tools such as firewalls, intrusion detection and prevention systems (IDS/IPS), vulnerability scanners, and Security Orchestration, Automation, And Response (SOAR) tools
• Experience with securing cloud environments such as AWS or Azure
• 5+ years of direct experience working in the Information Security field with experience in two of the following: Windows Server, Linux Server, Windows Server or Workstation
• Familiarity with Security Information And Event Management (SIEM) technologies
• Exposure to scripting languages
• Experience performing analysis of log files from a variety of sources, including Firewall, host and server logs
• Strong understanding of IT controls, vulnerabilities, and systems management
• Strong understanding of general controls and related control validation and testing processes and accepted procedures
• Vulnerability management experience with process or program management