Job Details

Email to Friend Save Back

Security Engineer

LITTLETON-80130, CO, US
07/14/2020

-

Required Skills

ISO 27001 Framework

Company

Infinity Consulting Solutions, Inc

Experience

7 to 9 Year(s)

Job Description

Security Engineer

FTE

Job Description

The Security Engineer will perform activities related to the development, implementation, reporting on, and adherence to the organization's policies and procedures that support the protection of sensitive and high-risk data as required by federal and state laws.

Responsible to keep internal Security management System policies up to date with the latest best practices and security standards, and drive external security audits. You will work closely with SCRAM's

Product Management, Engineering, Sales, Operations and Customer Service teams to ensure that information security is embedded throughout the organization and embedded in every decision we make.

ESSENTIAL FUNCTIONS AND BASIC DUTIES

Develops guidance and assists in the identification, implementation, and maintenance of the
organization's information security and privacy policies and procedures

Responsible to keep our internal Information Security Management System policies and procedures up to date with the latest best practices and security standards

Run project management for internal and external security audits

Provide guidance to SCRAM teams to ensure compliance with the information security management policies

Assists in the leadship of IT security program in accordance with stakeholders, leadership and senior administration (ISO, NIST, GDPR, OWASP, etc)

Conducts ongoing compliance monitoring activities and other compliance and operational assessment of the policies, functions, and processes of a effective security program.

Able to reply to RFP questions about our Security program

Experience and Skills:

Education/Certification:

Bachelors degree with a degree in Computer Science, Computer Engineering, EE or comparable discipline preferred

Required Knowledge:

Working knowledge of firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques and practices.

In-depth technical knowledge of network, and platform operating systems,

Working technical knowledge of Cloud Computing

High level of analytical and problem-solving abilities.

Working knowledge of ISO 27001 Framework

Helpful to understand the Cyber Security Framework and NIST 800-XX security Frameworks

Will need to understand GDPR and help to manage through implementation consultants for an EU / GDPR program.

Experience Required:

Minimum of 7 years experience as a Security Analyst

Working knowledge of:

Security Frameworks:

ISO 27001

NIST Cybersecurity Framework

GDPR

Compliance Auditing

Internal and External Attack surfaces

Data Exfiltration

Best Practices using standards

Cloud monitoring tools

Data Loss Prevention strategies