IT Security Engineer

SNI Technology has an immediate need for an IT Security Engineer to join a prominent Health & Wellness firm in Bethesda, MD!

This is an excellent opportunity to join an established team, while also having the opportunity to grow your career, and make your mark as an IT Security Engineer!

*This role is a FULLY REMOTE opportunity*

The successful IT Security Engineer will be responsible for performing threat hunting and remediation activities to prevent and respond to cyberattacks. You will also be expected to have a working knowledge of Tenable Nessus Cloud and Nessus Vulnerability Scanner, Acunetix Web Application Vulnerability Scanner, and the Federal Government ATO process. This position will use knowledge of threat hunting and vulnerability scanning and remediation processes.

RESPONSIBILITES:

Audits and evaluates existing data storage or transfer systems to identify weaknesses and assess risk; performs vulnerability testing.
Conducts audits and/or assessments, to identify cloud-related risks and vulnerabilities and coordinates remediation activities
Provides SME support for new and existing Cloud initiatives security systems for network, application, and databases; providing technical support as needed.
Provides threat modeling and risk assessment to identify the risk and severity posture of various systems in cloud environments
Collaborates in the design, development, and implementation of security standards.
Implements new or upgraded security measures or controls, and documents system or policy changes.
Assists in maintaining enterprise information security policies, technical standards, guidelines, and procedures necessary to support information security in compliance with established company policies, regulatory requirements, and generally accepted information security controls.
Leads the creation of a common control framework, for use by all project teams in meeting ATO requirements.
Works with all functions within the IT operations team to implement threat detection signals, deploy new tooling, and improve response capabilities.
Identifies opportunities for security process improvement and assists in the further development of those processes.
Reviews security violation reports or logs, investigates possible security exceptions, administers incident response procedures and coordinates with internal personnel or external agencies as needed.
Tracks and reports on the effectiveness of cloud information security technology controls, processes, and policies.
Assists with the investigation of security incidents, recommends, and implements solutions to remediate or mitigate threats and vulnerabilities.
Ensures compliance with regulations governing data security or privacy (HIPAA, PII, etc.).
Ensures compliance with security policies, standards, and procedures.
Coordinates with firm IT Operations teams, including Systems, Network, Dev-Ops and Help Desk teams on implementation and support of key Microsoft/Azure/ O365 and AWS initiatives.
Provides IT security subject matter expertise.
Provides subject matter expertise with Office 365 and Microsoft Azure with emphasis in security products and processes such as ATP (Advanced Threat Protection), security policies for Office 365, Azure AD Identity Protection and Conditional Access (CA).
Provides subject matter expertise in compliance and data retention, leveraging Office 365, Data Loss Protection. Provide architecture and security expertise for Microsoft Azure and AWS security technologies and strategy.
Provides consultation on higher level services such as IaaS, PaaS and SaaS layers, Authentication/Authorization, Data encryption, Key management, and other security services.
Maintains current knowledge of relevant security, privacy, and cloud technology trends.

QUALIFICATIONS:

Education: High School Diploma. Bachelor’s preferred in technical discipline and/or demonstrated 10+ years industry experience. Certified Information Systems Security

Experience:

At least 5 years of security engineering and Infrastructure experience.
At least 5 years hands on experience managing IT Infrastructure solutions which includes operating systems, networks, DNS, firewalls, SSO, MFA, AWS, Azure, Active Directory, IaaS, PaaS, and SaaS.
Familiar with industry security standards such as NIST cybersecurity framework, ISO 27001, OWASP Security Testing guidelines.
A least 3 years’ experience with security automation and orchestration (
At least 5 years of administration and management of security technologies and products such as SIEM, data loss prevention, endpoint security, sandboxing, threat intelligence, pen testing and vulnerable vulnerability management, identity management.
At least 5 years of experience as an Azure/O365 engineer.
Familiarity with best practices for vulnerability management, risk analysis, reporting metrics and assessments.

Technical Knowledge:

Working knowledge of Tenable Nessus Cloud and Nessus Vulnerability Scanner.
Working knowledge of Acunetix Web Application Vulnerability Scanner.
IT Security Framework Design, and Implementation, Security Risk Management with NIST or ISO 27k experience highly desired.
Working knowledge of Federal Government ATO process.
Working Knowledge of related FAR and FISMA regulations.
General knowledge of threat hunting methodologies.
General knowledge of vulnerability scanning and remediation processes.
Proficient in Microsoft Office Suite, Adobe Acrobat, SharePoint, and other proposal development tools and software.

SNI Technology jobs

System Engineer

Information Technology Security Engineer