JOB TITLE:
Information Security Engineer
REPORTS TO:
DEPARTMENT:
Information Security-
LOCATION:
United States / Remote
JOB OVERVIEW
Prometric is looking to fill the role of Security Engineer/Architect who will be responsible for designing, reviewing, and assisting with the implementation of information security measures, monitoring security processes and procedures, installing, and configuring security infrastructure and periodically assisting with risk assessments and internal audits. The role requires deep and broad engineering experience with Microsoft Azure technologies. The security engineer will perform technical network, system, or application security review to identify gaps in security architecture and recommend solutions in line with organization objectives.
The security engineer will stay abreast of IT Security best practices and provide subject matter expertise in both cloud and on premises cybersecurity environments. In addition to serving as a subject matter expert to collogues in the information technology department and other departments as required, the security engineer will take a leading role in the design and maintenance of cybersecurity solutions. The security engineer will be a team member of the Cybersecurity department which is responsible for the enterprise-wide information security programs. He/she will report to the head of the information security department and take part in the coordination of key strategic development and functional services to support department objectives and organizational goals.
COMPANY BACKGROUND
Prometric (www.prometric.com) is a trusted test development and delivery provider to more than 300 organizations worldwide. Prometric serves as an industry gatekeeper, ensuring that people legitimately earn the credentials they seek to achieve, and thereby guaranteeing a fair testing experience for all who come through our doors.
RESPONSIBILITIES
The information security engineer is responsible for leading, training, and developing the process and procedures for the following functions:
- Lead the architectural design and implementation of Azure cloud solutions, ensuring they meet industry best practices
- Work closely with departmental peers to ensure the security of the organization's systems and data.
- Provide subject matter expertise and guidance to management. Provide cybersecurity leadership in the design and architecture of cybersecurity solutions.
- Maintain current knowledge of applicable regulatory and compliance issues related to information security and staying up to date on current threats.
- Provide engineering guidance for all IT projects, including establishing baselines for emerging and newly opted cybersecurity technologies, evaluation of the enterprise architecture, hardware, software, and technical controls.
- Work closely with the IT Operations, Engineering and Architecture staff to ensure systems meet the business objectives while upholding existing standards and best security practices.
- Identifies and understands issues, problems, and opportunities, develops, and evaluates alternatives and solutions, and chooses a course of action.
- Provide senior level subject matter expertise on various cyber threats, solutions, and architectures.
- Prevent data and/or intellectual property loss and service interruptions by understanding and using technologies and processes that will effectively protect the network.
- Work in on-call rotation, Respond to computer security incidents and assist with incident response plans.
- Performing risk assessments and testing of data processing systems.
- Installing, updating, and configuring security infrastructure and other security measures.
QUALIFICATION REQUIREMENTS
EDUCATION
- Bachelor's Degree is not required but is preferred. Educational background will be discussed particularly Information Technology related.
- Technical Certification in Cloud (e.g., Azure, Amazon Web Services, Google, security certifications)
EXPERIENCE
- 10+ years of cybersecurity work experience.
- Experience with architecting solutions within Azure, AWS or OCI
- Technical aptitude or experience to design, architect, and implement Microsoft Security solutions such as Microsoft 365 Defender and Microsoft Defender for Cloud.
- Accustomed to working in a complex environment developing complex solutions in a cybersecurity context.
- Experience working with and configuring/managing cloud technologies and microservices.
- Experience with cybersecurity infrastructure including firewalls, IDS/IPS and SIEM.
SKILLS
- Expert understanding of key Azure components and concepts including networking, compute, storage, azure managed services and azure well-architected framework
- Good coding skills in Python, Powershell and Terraform
- Expert understanding of Azure Active Directory and implementing key technologies like Conditional Access, Identity Protection and Identity Governance. This should also include the deployment of Microsoft Intune and/or Microsoft Endpoint Protection and policies for securing these services.
- Ability to delegate tasks and responsibilities effectively.
- Ability to solve problems in stressful situations
- Ability to explain technical concepts to inexperienced users
- Ability to communicate at a conceptual level to management and at a detailed level to engineers and administrators.
- Time management skills
- Must have very strong problem solving/troubleshooting skills
- Strong communication skills are a requirement.
- Must be able to multi-task while maintaining organizational skills.
- Strong attention to detail
PHYSICAL JOB REQUIREMENTS
- N/A
Prometric is an Equal Employment/Affirmative Action employer. We do not discriminate in hiring based on sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected Veteran status, or any other characteristic protected by federal, state, and local law.