IT Security Engineer Job Description Template

As a member of our IT Security Operations team, the IT Security Engineer will help to raise the bar on security, focusing on securing our internal systems and customer-facing applications. To achieve this, they will collaborate with cross-functional teams to provide guidance on security best practices. This position requires a background in information technology and a proven track record utilizing security tools, along with excellent interpersonal, research and analysis skills. A successful candidate should also have the ability to work independently or collaboratively as part of a team, and a desire to own and drive solutions from conception through completion. 

Typical Duties and Responsibilities

• Serve as the project manager for small to medium projects sponsored by the information security department
• Provide information security subject matter expertise and serve as a technical resource for IT
• Lead and implement security process and network security improvements
• Ensure that system implementations conform to established company security standards and industry best practices
• Ensure the security toolset is configured optimally
• Measure and report on the effectiveness and efficiency of the IT security toolset
• Proactively identify, investigate, and remediate IT security risks and vulnerabilities
• Manage regular and ad-hoc updates
• Conduct pilot evaluations of security technologies
• Deploy and optimize security tools as needed to improve security posture
• Provide guidelines, requirements, and education to development communities
• Analyze intrusion detection, anti-malware, and system logs
• Monitor related industry security alerts
• Contribute to the development and delivery of security awareness and education programs

Education

• Bachelor’s degree in computer science, information security, or a related field

Required Skills and Experience

• 5+ years of experience maintaining network security in a large, multi-site business environment
• Experience with monitoring and security tools
• Experience building and maintaining security systems
• Experience with .NET and Java security development frameworks
• Experience with scripting and programming
• Experience with network and firewall technologies
• Experience with automation and scripting using REST APIs
• Experience with security incident response and vulnerability detection and remediation
• Experience implementing, managing, assessing, and reporting on controls such as PCI, SOX, ITGCs, or GDPR
• Thorough knowledge of information security principles, security technologies, and security best practices
• Knowledge of commonly used security protocols
• Knowledge of Azure Microservices or AKS
• Strong analytical and troubleshooting skills
• Strong communication and interpersonal skills