Search Jobs
Find your next opportunity today.
Prosum
https://prosum3.wpengine.com/wp-content/uploads/2020/03/JB-Square-200x200-1.png
https://www.prosum.com
https://www.prosum.com
true
Senior Security Engineer
10100 Santa Monica Blvd #2200 Los Angeles, CA 90067 US
Job Description
Salary: $160-180k
This role will work closely with the Enterprise Architecture and Service Delivery (EA&SD) team, and the Senior Security Engineer will assist with the Service Delivery (SD) platform and Cloud security posture, including: Disaster Recovery (DR)/Business Continuity (BC) programs, vulnerability assessment findings, Zero Day vulnerabilities, posture related exercises so that Information Security directives and activities align with company’s data security policy, ISO 27001:2022 and client audit requirements/directives, etc.
Duties and Responsibilities:
This role will work closely with the Enterprise Architecture and Service Delivery (EA&SD) team, and the Senior Security Engineer will assist with the Service Delivery (SD) platform and Cloud security posture, including: Disaster Recovery (DR)/Business Continuity (BC) programs, vulnerability assessment findings, Zero Day vulnerabilities, posture related exercises so that Information Security directives and activities align with company’s data security policy, ISO 27001:2022 and client audit requirements/directives, etc.
Duties and Responsibilities:
- Working alongside the Service Delivery team and IT vendors, takes instructions from the CISO and Director of EA&SD for the installation and configuration of Security related systems; assists with the Security posture of the various platforms and applications (Zero Trust); assists with Group Policy; assists with Zero Day vulnerabilities and across all on premises and cloud related systems.
- Provides first-line and on-call support for security incident escalation and remediation 24x7, 365.
- Assists and trains junior team members in the use of security tools, the preparation of security reports, and the resolution of security issues; cross trains engineers where applicable (Desktop Analysts, 2nd tier, SD Team)
- Reports unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes
- Develops and maintains documentation for security systems and procedures
- Responsibility in creating and maintaining Security related documentation as directed by the CISO, Director of EA&SD and Security Manager of Governance, Risk and Compliance or the associated project team.
- Has strong knowledge of on premises and Cloud (primarily Azure/MS E5 related platforms)
- Responsibility for AD, PIM/PAM, LAPs, and associated technologies for privilege management
- Driving Zero Trust design with CISO and Director of EA&SD
- Performs normal and exceptional processing of user access and change requests, escalating such requests when appropriate and following Incident Management and Change Management guidelines.
- Participates in and leads preparing, planning and testing Disaster Recovery initiatives partnering with the CISO and Director of SD&EA and the SD team.
- Partners with CISO and Director of EA&SD on the continuous improvement of all DR/BC systems, given the results from testing these systems and recalibrate and document MTD, RPO, and RTP.
- Responds to, and where appropriate, resolves or escalates reported security incidents
- Monitors system logs, SIEM tools, and network traffic for unusual or suspicious activity. Interprets such activity and makes recommendations for resolution
- Investigates and resolves security violations, provides postmortem analysis and leads post incident review determining any continuous improvement objectives (necessary changes to process or systems) that would prevent such incidents from reoccurring; feeds Known Problem and Incident Response Management policies and procedures as necessary.
- Manage and monitor external Security Operation Centers to ensure appropriate configurations are maintained and incidents remediated
- Partners as needed in Service Delivery projects to develop, plan and implement Security configuration items
- Leads 3rd party review of firewalls and partnering with the Senior Network Engineer
- Partners as needed with SD teams installing and testing new security software and technologies
- Supports data encryption deployments, including key management and documentation
- Supporting the Manager of Governance, Risk and Compliance, assists with the gathering of security audit related artifacts for Configuration Item identification; across all of IT and Business Services, and maintains a compliance related central repository to store all artifacts in a central location; eliminates the need for repeat requests tied to audits
- Coordinates remediation required by audits and documents exceptions as necessary
- Leads vulnerability management scanning, reporting and remediation, partnering with the Service Delivery (SD) team and associated IT vendors.
- Leads penetration testing for all platforms partnering with the vendor and SD team to complete posture remediation.
- Responsibility for endpoint vulnerability clients.
- Microsoft Defender for Endpoint policies, Endpoint control, Microsoft E5 use and continuous improvement, vulnerability endpoint clients, DNS and Secure Web Gateway, etc.
- Research threats and vulnerabilities(personal effort, vendor related feedback, vulnerability management platforms, industry groups and news alerts ), and where appropriate take action to mitigate threats and coordinate remediation of the vulnerabilities across Service Delivery associated platforms.
- Collates security incident and event data to produce monthly exception and management reports; works with the Supervisor of Help Desk and Process to contribute to monthly IT operational reporting.
- On Point 24x7, 365, for all incident response related actions
- Partners with Incident Response retainer vendors in the identification and remediation of the threat, partnering with and leading the SD team efforts across platforms given associated engineering tasks.
- Maintains security diagrams
- Participates and supports cybersecurity architectural requirements as directed by the CISO and Director of EA&SD
- Participates in cybersecurity working groups
- Bachelor of Science in Computer Science or a related field or a minimum of 5 years of comparable work experience
- Five or more years of work experience as a System Security Engineer or related position
- Proven experience developing, operating, and maintaining security systems
- Extensive knowledge of Azure, MS E5, Sentinel, Defender for Endpoint, Tenable, Varonis, Fortigate, and Cisco Firewall, including operating system, database security
- Proficiency in networking technologies, network security, and network monitoring solutions
- Knowledge of security systems, including anti-virus applications, content filtering, firewalls, authentication systems, and intrusion detection and notification systems
- Security Certifications such as CISSP, CISM, CCNA-S, CISA, GIAC
- Experience with scripting automation using Python, Bash & PowerShell
- Proven experience building security reference architecture for on premises, all-in-cloud deployments, and hybrid scenarios
- Implementation experience with enterprise security solutions such as Endpoint Protection (DLP/Allow listing/HIPS), WAF, IPS, Anti-DDOS, and SIEM/FIM.
- In-depth knowledge of security protocols and principles
- Exceptional communication skills, critical thinking skills and ability to solve complex problems
Share This Job:
Related Jobs:
Login to save this search and get notified of similar positions.About Los Angeles, CA
Ready to take your career to new heights in sunny Los Angeles, California? Explore our enticing job opportunities in the City of Angels and beyond. From the glittering Hollywood sign and iconic Griffith Observatory to the vibrant arts scene, delectable cuisine, and endless outdoor adventures, LA offers a perfect blend of work and play. Immerse yourself in world-class museums like The Getty and LACMA, catch a show at the historic Pantages Theatre, or cheer on the Lakers at the Staples Center. Whether you're drawn to the beach vibes of Santa Monica or the hustle and bustle of Downtown LA, this dynamic region promises limitless growth opportunities and an unbeatable quality of life. Browse our job listings now and discover your next career adventure in Los Angeles!
