Information Security Engineer

• BS degree in Computer Science, Information Systems or equivalent experience preferred.
• CISSP certification required.
• Industry certifications preferred: CISA, CISM, CEH, GIAC, or equivalent.
• 8+ years of relevant experience focusing on security analysis.
• 3+ years of experience performing Network Security with expertise configuring Firewalls, Network IDPS systems, Data-Loss Prevention (DLP), VPN, Proxy/Web content filtering, WAF, NAC, Zero-Trust, GRE/IPSec, and/or Network segmentation.
• Experience managing and configuring Vulnerability Management tools, Cloud Security (including CASB & M365), Identity and Access Management tools, and/or Multi-Factor authentication
• 3+ years of experience performing Endpoint Security with expertise configuring AV and/or MDR/EDR solutions, hardening Windows Server and Workstation OS, and/or MDM and Mobility.
• Experience performing SIEM management and tuning, incident response, forensics, playbook development, and/or SOAR tools.
• Ability to employ procedures, methods, and tools for identifying, representing, and formally assessing the important aspects of alternative decisions (options) to make an optimum (e.g. best possible) decision.
• Experience with IT governance and/or risk.
• Strong knowledge of network & infrastructure security architecture.
• Experience working with Linux and Windows operating systems.
• Experience with Microsoft Azure, IaaS, PaaS, SaaS, NaaS platforms
• Detailed and thorough knowledge of incident analysis and response concepts and techniques, including incident tracking process, root cause, lessons learned and process improvements.
• Knowledge of compliance standards and security frameworks (COBIT, NIST, HIPAA, ISO27001/2, OWASP, PCI)
• Knowledge of security regulations, frameworks and security requirements that impact SMB market (GLBA, HIPAA, PCI, NIST 800-171, NIST 800-53, NIST -CSF, CMMC)
• Excellent analytical and problem-solving skills with the ability to work under pressure.
• High level of personal integrity, with the ability to professionally handle confidential matters while leveraging the appropriate level of judgment.
• Strong interpersonal and communication skills.
• Ability to work well under stressful environments.
• Ability to work extended hours and weekends when required.

If you have an interest and meet these requirements, we encourage you to apply online!

• Must be a United States citizen to Apply.

Ability to gain a security clearance.

EOE Principles only.

eTrepid is an Award-winning Veteran Owned Managed Security Service Provider (MSSP) located in and certified by the state of Maryland. We provide complete and comprehensive fully Managed Cyber Solutions that deliver on all five tenants of the NIST framework. eTrepid also remains on the forefront of industry changes such as regulations associated with the Cybersecurity Maturity Model Certification (CMMC).

The sun never sets on eTrepid, partnering with global leaders in IT enables our client systems to be monitored and serviced by seasoned and certified professionals in real time 24 hours a day, seven days a week, 365 days a year. We can even put boots on the ground in all 50 states.

Originally posted on Himalayas