Job DescriptionPosition SummaryThe successful candidate will work alongside the Enterprise Operation Center Team (EOC) in the Information Management Technology Department. The IT Security Engineer is responsible for implementing security measures to protect computer systems, data and networks. The SOC Engineer uses technical knowledge on a number of security technologies to analyze and respond to security threats from various security platforms and technologies.
Responsibilities- Monitoring security infrastructure, identifying and reporting all data threats to R+L Carriers
- Identification of incidents and subsequent analysis and investigation to determine their severity and the response required.
- Ensure incidents are correctly reported and documented in accordance with policy and procedures.
- Be prepared to provide a Technical Escalation Point during security incidents, establishing the extent of an attack, the business impacts, and advising on how best to contain the incident along with advice on systems hardening and mitigation measures to prevent a reoccurrence.
- Contribute to root cause analysis reports after any information security issues, along with plans to mitigate the future incidents
- Work with security vendors to ensure our security initiatives limit R+L's vulnerabilities
- Perform risk assessments and test data processing systems
- Aware of any firewall changes, virus protection, data encryption and other security measures
- Recommend security enhancements and purchases
- Develop standard operating procedures for recovering from an attack
- Meet with change management regularly to ensure changes to the system are not opening the possibility of an attack
- Maintain a keen understanding of evolving threats and vulnerabilities to ensure the security of the network.
- Meet weekly with the Secure Works SOC to discuss threats and contribute to remediation plans.
- Working closely with EOC and Architecture teams to strengthen our security posture.
- Support, troubleshoot, configure, manage, and upgrade FW, VPN, APM, WAF and a wide variety of other security products
Desired Skills- Bachelor's degree in computer science, programming, engineering or a related field or 5+ years of IT security experience
- Experience preferred in Information Security or IT risk and compliance
- Prefer professional security certifications such as: CISA, CISSP, CRISC
- Strong ability to effectively communicate across all levels of management
- 2-4 years of System or Network Administration experience in Windows or Linux environments a plus
- Experience with Intrusion Prevention Systems (IPS) and Network Access Control (NAC) a plus
- Understanding of PCI
- Excellent analytical, interpersonal, oral and written communication skills
- Highly motivated self-starter with ability to multitask and complete assignments within predetermined deadlines
- Must be able to pass a background investigation
Benefits: R+L Carriers offers an excellent compensation and comprehensive benefits package that includes Medical/Dental/Vision Insurance, 401(k) Retirement Plan with company matching contributions, Paid Vacation & Holidays, and vacation lodging at our exclusive employee resorts in Daytona Beach, FL, Big Bear Lake, CA, Pigeon Forge, TN, and Ocean Isle Beach, NC.
