Security Engineer III - Network and Cloud Security - Hybrid (Remote Considered) - 26-103

Job Description:

Under the leadership of the Senior IT Security Manager, the Security Engineer is responsible for the overall architecture, engineering, implementation and monitoring of security solutions/technologies to protect the confidentiality, availability, reliability and integrity of the organization’s systems and data in dynamic computing environment. Develops security standards, policies and procedures. This individual will be part of the IT security engineering team who collectively demonstrate excellent technical competence, continually ensure the highest levels of security protections and systems availability, optimization, and reliability while ensuring the best possible user digital experience.  The security engineer will have a strong background in designing enterprise security architecture and developing cyber security protection initiatives.

Specialization

Responsible for the implementation, administration, monitoring, and support of enterprise cybersecurity technologies and processes, including:

• Identity and Access Management (IAM)
• Multi-Factor Authentication (MFA)
• Privileged Access Management (PAM)
• Endpoint Detection and Response (EDR/XDR)
• Security Information and Event Management (SIEM)
• Data Loss Prevention (DLP)
• Vulnerability Management
• Security Monitoring and Threat Detection
• Cloud Security (Microsoft Azure, Microsoft 365, SaaS Applications)
• Network Security (Firewalls, VPNs, IDS/IPS, Web Security)
• Incident Response and Security Operations
• Security Automation and Orchestration
• AI Security and Governance
• Non-Human Identity (NHI) Security
• AI Agent Risk Management

Job Responsibilities:

• Work with Sr. IT Security Manager by making recommendations on products, services, protocols, and standards in support of security infrastructure projects.

• Knowledge of IT audit and control, governance and technical writing and documentation

• Install, upgrade, and maintain security hardware and software systems.

• Ensure the security, integrity and availability of the organization’s IT Infrastructure.

• Duties require knowledge and background experience in networks and datacenter and cloud infrastructure which support data, voice, and video.

• Collaborate with IT departments around vulnerability remediation plan and process.

• Serves as technical and functional subject matter expert across multiple security domains, raising awareness and communicating security risks within the organization as well as partners and vendors.

• Provide Tier-3 escalation engineer support to daily operational issues.

• Advanced knowledge of IT audit and control, governance and technical writing and documentation

• Expert knowledge of IT audit and control, governance and technical writing and documentation

• Knowledge of DevSecOps, Azure and cloud-based services in areas of security automation, engineering and design.

Required Experience and Professional Skills

• Strong analytical, communication, teamwork and interpersonal skills.

• Excellent team player – proven ability to resolve problems professionally and systematically.

• Experience in cloud, disaster recovery planning, high-availability, backup, recovery and continuity solutions.

• Healthcare and security technology services experience preferred.

• Minimum 8+ years of security administration/engineering experience.

• Excellent proven analytical, communication, teamwork and interpersonal skills.

• Knowledge web, mobile, network, cloud and application security engineering architecture and operations.

• In a tiered environment, provide support, assistance and security technical guidance to Systems and Network Engineers.

Required Education and Certifications

• Minimum Education:  Bachelor’s degree in Computer Science, or equivalent combination of education, training and work experience.

• CISSP (Certified Information Systems Security Professional)

• Security+ (CompTIA Security+)

• AZ-500 (Microsoft Azure Security Engineer Associate)

• PCNSE (Palo Alto Networks Certified Network Security Engineer)

• Certified Ethical Hacker (CEH) or equivalent offensive security certification

• CCNA (Cisco Certified Network Associate)

• CCDA (Cisco Certified Design Associate Exam)

• CCNP (Cisco Certified Network Professional)

• GSEC (GIAC Security Essentials Certification)

Additional Information

Salary Range: $109,000 - $144,500 Annual

Location: San Ramon (Remote Considered)