Cyber Security Engineer at Alliance Sourcing Network,Inc.

CORP TO CORP NOT ALLOWED

Perm Opportunity(Client does not sponsor)

Salary+ Bonus offered

Onsite 3 days per week in Midtown, NYC 10019 (local candidates only)

Interview Mode: Video and in-person interview

Summary:

The Security Engineer will be responsible for the IT Security review and assessment of the corporate desktops and servers, infrastructure applications & network. Candidate is also responsible for enforcing the security policy and complying with requirements of external security audits and recommendations.

Other responsibilities include monitoring of alerts for any reported anomalies and malicious activities on network and host levels as well as responding to audit findings.

Key Responsibilities

• Prepare, organize, conduct & follow-up on vulnerability scans and remediation on all scopes;
• Prepare, organize, review & follow-up on pentests and remediation on all scopes;
• Prepare, organize, review & follow-up on Purple team exercise and its remediation projects;
• Conduct annual Firewall rule review and mitre attack.
• Respond to internal Audit findings by developing controls and documentation packages;
• Review network architecture designs;
• Ensuring that all areas of Client remain in full compliance with Security directives related to IT Security management as received from Head Office and other guidelines (FFIEC, NIST);
• Perform cybersecurity controls;
• Support Continuous Monitoring Framework by effectively reporting the Key Risk Indicators (KRIs) and Key Control;
• Evolve the Security function by continuous assessment of our risks, threats & vulnerabilities;
• Maintain and update all local policies, procedures and standards;
• Ensure security monitoring tools such as AV, DLP, patch agents are registered & monitored;
• Optimize all IS Security controls / processes through automation via scripts, tools and other means ;
• Continuous monitoring all Hosts to ensure continuous compliance to Head Office technical security standards and Server build standards;
• Perform Scheduled Security Patch Assessments to validate that all servers and desktops are compliant;
• Keep current in IT Security and cybersecurity industry trends;
• Awareness and development of controls and detection solutions to address malware, cybersecurity and advanced persistent attacks;
• Function as the Backup for IT Sec Engineering Manager;
• Support IT Security and cybersecurity Awareness campaigns.

Mandatory skills:

• Minimum 6 to 8 years experience in technical Cybersecurity engineering functions
• 4 year accredited college/university BA or MS in MIS, Engineering, Computer System or Computer Science
• SecOps and Vulnerabilities management experience
• Experience working for banking client is preferred
• SentinelOne and/or Tenable is a nice to have