Job Summary
The Senior Security Engineer plays a critical role at Elevate. This role will provide security leadership in the implementation maintenance monitoring and troubleshooting of a broad range of controls at Elevate. TheSenior Security Engineer also serves as a consultant to internal and external customers in maintaining security for Elevate and its products. The Senior Security Engineer provides technical direction and support to less experienced members of the team and to other teams who require security expertise.
Essential Functions
- Serve as information security subject matter expert and actively assist or lead Elevate teams in the development of secure business solutions for medium to highly complex problems.
- Perform security risk assessments and lead remediation efforts.
- Analyze audit findings and make recommendations to lower risk to acceptable levels.
- Consult advise and approve secure network design.
- Ensure that security changes comply with company change management policies and procedures.
- Author security policies procedures standards and guidelines.
- Automate security processes and tasks to achieve efficiency and/or improved accuracy.
- Maintain and proactively improve common security control practices such as: OS patching and hardening intrusion detection (network antimalware) logging and data loss prevention.
- Promote policy adherence and security best practices through awareness training and coaching.
- Support or lead information security incident response as required.
- Perform additional duties as assigned.
Education and Experience
- Strong background working with security technologies: firewalls intrusion detection antivirus vulnerability scanning and remediation security log and event management network traffic analysis privilege management etc.
- 7 years of technical IT experience 4 years working as a security engineer or similar
- Working knowledge of enterprise cloud security principles and technologies preferably Azure.
- Working knowledge of Microsoft Sentinel or similar system highly preferred.
- Knowledge of regulatory compliance standards used in financial industry (e.g. PCI GLBA SOX SAS70
- Strong understanding of LAN WAN and wireless communications and protocol including network packet analysis and routing protocols
- Strong knowledge of Linux and Windows operating systems as well as supporting technology (Active Directory)
- Experience in having ownership over a security technology with a proven record for improvement of the technology.
- Experience in overcoming technical and soft skill challenges to achieve project deliverables.
- Scripting knowledge for automation of tasks (such as Python PowerShell KQL PowerApps etc.
- Security certifications (E.g. CISSP CISM SCCP CCSP etc. preferred technologyspecific certification (Azure Microsoft other tool certification) optional.
- Bachelors degree in computer science or similar field of study optional.
California Employee Privacy Policy Family & Medical Leave Act Employee Polygraph Protection Act EVerify
#LIBJ1
Required Experience:
Senior IC