AVP, Perimeter Security Engineer

Job Description:

Role Summary/Purpose:

TheInformation Security Perimeter Defense Engineerwillbeakey role in safeguarding the organizations systems, networks, and data.The positionis responsibleformanaging the lifecycle of Security Policy regarding Web Application Firewall, Firewall and Proxy technology, including the building of secure Policy, automating the management of these technologies, and the identification, tracking and remediation of risks related to network security infrastructure.

This position is remote, where you have the option to work from home. On occasion we may request for you to commute to our nearest office for in person engagement activities such as team meetings, training and culture events. To ensure the safety of our colleagues and communities, we require employees who come together in-person to be fully vaccinated. We’re proud to offer you choice and flexibility.

Essential Responsibilities:

• Responsible for management/design/governance around the Firewall and Proxy technology to ensure continued compliance and operational effectiveness and efficiency.

• Work with Security Architecture, Network Operations, Application and other teams to design and build security policy across the enterprise to safeguard the organizationsplatforms and systems

• Identifies problems and clearly articulatessolutions and recommendations

• Collaborates to identify capability gaps, develop requirements, identify solutions to address, assist with proof of concepts, testing and deployment of solutions

• Partners with peers withintheorganization toeffectively prioritize work by using agile processesand ensuring risks, impediments, and asks are brought to leadership in a timely fashion

• Maintaining policy from a business as usual (BAU) aspect by ensuring the proper change management and incident management

• Identify process/technology security improvement initiatives and own the timely execution and completion

• Demonstrable ability to discuss with other IT personnel who as less network-savvy the development of a least-privilege firewall security rulebase fitting the requirements of their application, identifying access that may be excessive or not compliant with existing Company Policies, Standards, best practices and guidance

• Implement security compliance strategies including:

  • Review and understand traffic patterns as reported by logs

  • Evaluate and document the needs for new firewall/proxy rules

  • Draft proposed rules for implementation

• Perform firewall rule and proxy policy periodic review activities ensuring appropriate owner’s evidenced approvals and perform remediation activities while ensuring no business impact

• Perform cybersecurity defense incident triage, to include determining scope, urgency, and potential impact; identify the specific vulnerability; and make recommendations that enable expeditious remediation, and drive those actions to completion

• Develop and utilize metrics to track the performance and efficiency of security operations requests processes, remediation efforts, and associated technologies

• Ensure that expectations are met and ensure high customer satisfaction levels through established metrics against SLAs

• Design SIEM/Splunk queries to provide insight into operational effectiveness and help identify risks/threats

• Perform other duties and/or special projects as assigned

Qualifications/Requirements:

• Bachelor's degree in Computer Science/Engineering or related field, with a minimum of1years of experience in Technology ORHigh School Diploma/GED and a minimum of3years or experience in Technologywith a minimum of 2 years in security.

Desired Characteristics:

• Experience with multiple of the following technology: Palo Alto Firewall Policy , Akamai Web Application Firewall Policy, Amazon AWS Security Groups, Zscaler Internet Access and Private Access, VMware NSX DFW Policy.

• Experience in modern coding languages such as Pythonand writing API calls used in the effort to automate manual tasks.

• Cyber Security experience, especially around designing, building and management solutions

• Understanding of information security practices and policies, including risks and threats

• Good understanding of security landscape as a whole

• Good teamwork, oral and written communication

• Creativity and individual thinking, and the ability to work both with a team and unsupervised

• Strong and efficient problem-solving and analytical skills, willingness to learn

• Understanding of public cloud platformsfrom an infrastructure and development aspect

• Ability to work under pressure and sustain productivity with multiple simultaneous projects

• Familiarity with problem and incident management, change management, notifications, and basic operational understanding of running and maintaining infrastructure

Eligibility Requirements:

• You must be 18 years or older

• You must have a high school diploma or equivalent

• You must be willing to take a drug test, submit to a background investigation and submit fingerprints as part of the onboarding process

• You must be able to satisfy the requirements of Section 19 of the Federal Deposit Insurance Act.

• New hires (Level 4-7) must have 9 months of continuous service with the company before they are eligible to post on other roles. Once this new hire time in position requirement is met, the associate will have a minimum 6 months’ time in position before they can post for future non-exempt roles. Employees, level 8 or greater, must have at least 24 months’ time in position before they can post. All internal employees must consistently meet performance expectations and have approval from your manager to post (or the approval of your manager and HR if you don’t meet the time in position or performance expectations).

Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Reasonable Accommodation Notice:

• Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.

• If you need special accommodations, please call our Career Support Line so that we can discuss your specific situation. We can be reached at 1-866-301-5627. Representatives are available from 8am – 5pm Monday to Friday, Central Standard Time.

The salary range for this position is 65,000.00 - 130,000.00 USD Annual

Salaries are adjusted according to market in CA and Metro NY and some positions are bonus eligible.

Grade/Level: 10

Job Family Group:

Information Technology

Vacancy expired!