IAM Engineer

Job Posting External

Job Duties

• Cyber Security Program Task Management - Oversee the execution of tasks in support of Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS), vulnerability scanning, vulnerability patching, antivirus application, whitelisting applications, applying security controls, penetration testing, security certificate management and other elements of the cyber security program.  Provide oversight for implementation and sustainment a sound defense-in-depth plan.  Lead incident response, data loss prevention and disk encryption efforts.  Function as a security architect and project lead in discovering, developing and deploying new capabilities.
• Cyber Security Auditing - Using appropriate tools and methodologies manage the inspection of the Company’s IT infrastructure for program compliance and/or new vulnerabilities.  Identify, manage, and communicate deviations to department management.  Use intuition and instincts to predict and pre-empt possible threats by utilizing an effective risk management process.
• Cyber Security Governance - Develop cyber security standards, conduct IT project risk assessments, provide PCI and HIPPA guidance, and coordinate third party risk assessments.  Oversee company Mobile Device Management (MDM) solution implementation.
• Cyber Security On-going Training and Self-Study - Keep up with industry trends in order to maintain proficiency and to keep current with emerging cyber security threats  Remain informed on trends and issues in the cyber security industry, including current and emerging technologies.  Leads efforts to educate Company end users on cyber security risks and best practices.
• Cyber Attack Post-Mortem Analysis - Upon the mitigation of a cyber security incident, lead post-mortems which discover and document root cause analysis, specific chain of events, scope of the breach, and mitigation steps with emphasis on identifying effective and ineffective elements of our security program.  Create recommendations report in order to improve the Company’s cyber security posture.  Perform other duties as assigned.

Minimum Qualifications

• 8-15 years related experience
• High school diploma or equivalent
• Occasional travel (0-5%)
• Occasional overnight stays (0-5%)
• Job requires employee to drive a personal vehicle to conduct company business < 20% per week (8 hours) and/or travel locally between company locations during scheduled workday
• Per 8-hour shift.  Sit 7 hours and stand 1 hour. Both typical and non-typical office environment (low to moderate noise level, low exposure to hot/cold temperatures, dust, fumes, and vibrations).Regular interaction with others and performs a degree of independent work.  Infrequently lift 21-30 pounds. Physical and mental demands are akin to the majority of office positions with prolonged periods of sitting and prolonged use of a computer/keyboard. Infrequent lifting, walking and climbing stairs. Occasional use of office equipment (copiers, printers, etc.).

Preferred Qualifications

• Bachelor’s degree in Cyber Security or Computer Science. Master’s Degree (Cyber Security, Computer Science or equivalent) IT Security certifications (e.g. CISSP, CISM, CRISC, CISA, or SANS). 
• Candidates accepted without proper certifications will be expected to achieve certification within a reasonable time frame.
• Excellent written and oral, written, deductive reasoning, and analytical trouble shooting skills. 
• Good interpersonal skills and facilitate positive relations between business groups.