SECURITY ENGINEER

General Description:

 

This person will work closely with the various technology teams within STG as required based on the project.  The person will serve as a resource for implementing/auditing data protection within purchased applications, internally developed applications and databases, as well as supporting Enterprise Security endeavors.  A strong emphasis on customer privacy as defined by privacy regulations and law will require that this individual has a solid foundation in current end to end data protection technologies and how it applies to the enterprise environment.  This position will also require flexibility and versatility in filling various “infrastructure security”-related roles for policy, project-oriented work and problem resolution.  This person must be comfortable interacting with all levels of management.  A strong knowledge of web based applications and attack scenarios is a must.

 

Essential Duties and Responsibilities:

 Assist in the design, implementation, and support of web applications and encryption solutions as they apply to web security.Assist in the troubleshooting of day-to-day security, encryption and backup problems within web based applications, the network and infrastructure environment.Provide security related tactical and strategic input on software development planning and related projects.Design, maintain and oversee adoption and enforcement of policies and procedures that must assure successful protection and audits  for:Network accessNetwork, server and workstation securityData protection initiativesForecast and proactively recommend strategic hardware/software upgrades or replacements to support security, encryption and development policies.Provide oversight of the Microsoft Active Directory Security and Policy implementation.Interface with various STG team(s) and/or vendor(s) to coordinate solutions for hardware and software security problems as it applies to data protection and/or software development.Provide security related tactical and strategic input on software planning and related projects.Interact with users at all levels of the company.Some business travel may be required as needed.Some after hours work as needed.

 

Education and Experience:

 

Required:

 A technical Bachelor’s degree (B.A./B.S.) from a four-year college or university:Work experience can be substituted, for the right candidateMath, Computer Science or Information Management a plusMinimum of 4 years experience in software development, database administration or QA of which at least two years must include Information Security directly or as a main focus of responsibilities, (i.e. you don’t have to wear the hat, just have the  responsibilities).Strong communication skills:DocumentationPresentationInterpersonalProject management experience.Technical proficiency in hardware and systems software as it relates to application security and rights management:Demonstrated level of expertise in Active DirectoryProficient with security aspects of Microsoft Windows Server and workstation.Demonstrated level of expertise in using application certification toolsExperience implementing encryption appliances or software.Experience in application/data encryption.Java, .ASP and VB programming languages.

 

Preferred:Any combination of GIAC technical certifications desired, CISSP preferred.Graduate work in information security management particularly as it relates to code development.Experience with Anti-Malware software.Experience in MS SQL, AIX and/or DB2.Experience in using and maintaining Linux systems.Experience in implementing and managing IDS, Cisco IDS and Routers.Experience in implementing and managing Juniper products .Web development or site management. Ethical hacking. Knowledge in Flash/Flex and Web 2.0 development.

 For IMMEDIATE consideration, please forward resume with salary requirements to: resumes@highpointins.com