Security Engineer

---

Job description

About Us

Vertical Screen is one of the world's leading applicant screening firms. Operating through three subsidiaries - Business Information Group, Certiphi Screening and Truescreen, as well as a sister-company, Fieldprint - we serve the largest and most respected organizations, institutions, corporations and government entities around the country and around the world.

Job Description

As a growing progressive company where technology powers our success, we are seeking a Software Engineer to help enhance and expand our existing systems. Our team is passionate and dedicated to developing new features for our products, and we are looking for like-minded individuals to become the newest members of our expanding development operations. This exciting position comes with an excellent benefits package that includes medical and dental insurance, a 401(k) plan with company match, bonus program, paid time off, casual working environment, flexible work schedule and more!

This may be a temporarily remote position due to COVID-19.

Responsibilities

Security Administration

• Gain an excellent understanding of the company's physical and logical security systems like web application firewall, endpoint detection and response system, enterprise vulnerability management system, etc.
• Install, configure, maintain, and troubleshoot a wide range of security software, security systems, and security services.
• Perform hardware/software upgrades to and patch existing computer security equipment as needed. Investigate error messages and determines resolution and cause.
• Generate security systems' reports and dashboards.
• Operate security systems to achieve their operational goals; emergency off-hour supports may be required occasionally.
• Work on issues/tickets.
• Assist in testing and maintaining the company's security and Business Continuity Plan policies.
• Perform log review, diagnosis, troubleshooting, and incident response.
• Act as SME of respective security systems under his/her administration.

Security Analysis/Engineering

• Maintain and develop security architectures for enterprise-wide systems.
• Conduct internal audits, system scans, penetration tests, review reports and monitor systems to ensure internal and external security meet compliance requirements.
• Conduct risk assessments, perform risk management, and recommends appropriate action.
• Manage and implement security architectures for identity management, authentication, access control, authorization, and accounting systems that meet requirements for security, performance, and integration.
• Identify emerging patterns resulting from analysis of undesirable conditions until patterns converge into fundamental root causes.
• Consult with Compliance, Internal Audit, Operations, and Development teams to assure application of security principles and mediation of risk associated with appropriate technologies, operating platforms and application systems.
• Work with Infrastructure Architecture and Operations personnel to ensure secure deployment/remediation of environments.
• Participate in governance and oversees process for application and infrastructure-based projects.
• Adhere to Secure Development Lifecycles by working with developers to secure architecture, design, implementation, and operationalization of web applications.
• Work with developers to remediate technical vulnerabilities identified by manual or automated web application scanning tools (Static & Dynamic).
• Manage third party manages security service provides.

General Security

• Uphold all corporate security policies, procedures and guidelines, especially those in support of ISO and similar security frameworks.
• Ensure that daily activities support safeguarding of client and corporate data and resources.
• Report any security concerns to the security team.
• Obtain security certifications and certification maintenance.
• Keep current on new developments and techniques in information technology.
• Assume contractual management responsibilities, assists in requests for proposals, vendor selection, and contract monitoring.
• Train Vertical Screen personnel on security issue.
• Assist in implementation and ongoing review of information security program strategy, policy, procedure and processes.

Documentation

• Assist in the documentation of the physical and logical security elements of the enterprise network, applications, and facilities.
• Develop, maintain and update a library of technical documentation and security policy.
• Collect, maintain, and update a library of security framework audit evidence for internal stakeholders, external clients, or third party assessors.
• Assist Security Manager with development of system standards, short- and long-term goals, project management, and strategic directions.

Required Skills

• Windows Desktop and Server configuration (Primary - Group Policy, Active Directory, Registry, User Profiles, Event Viewer; Secondary - Hardening, Enhanced Mitigation Experience Toolkit, Boundary controls, SysInternal tools, Windows Event Collection, PowerShell/Python)
• Knowledge of a variety of hardware and software security capabilities and features.
• Strong technical knowledge of OS platforms such as Windows and UNIX.
• Strong knowledge of information security standards and specifications.
• Knowledge of current network security threats and impact on enterprise operations.
• Deep understanding of TCP/IP Networking and Encryption/Hashing basis and use cases
• Good understanding of antivirus, spyware and other malware solutions.
• Able to manage SSL certificates and the certificate implementation process.
• Preferable with knowledge and management experience of Web Application and Next Generation firewalls and intrusion detection/prevention devices.
• Excellent in verbal and written communications.
• Must have good presentation skills.
• Must be able to work with cross-functional teams in the design and implementation of information technology.
• Able to manage multiple tasks or projects.
• Able to work with a diverse population.

Qualifications

• Education or experience equivalent to a college degree is required.
• 4+ years MIS experience, at least 2+ years with direct responsibility for information security, IS policy development, implementation, and administration is required.
• Prefer security certifications: CISSP, CISA, CEH and/or OSCP for example.
• Must be able to pass an initial FBI criminal background and subsequent periodic checks

Education

Education or experience equivalent to a college degree is required.

Benefits



• Comprehensive benefits package
• 401 (k) plan with company match
• Paid time off and paid holidays
• Flexible shift availability
• Discounts with neighborhood businesses
• LEED Platinum Certified Headquarters with employee gardens

Additional Information

Must complete ISO and FCRA certification tests. Must also complete department specific training certifications and corporate security training.

For consideration, please apply below.

All candidates are subject to a drug test and a background screening.

EOE M/F/Disabled/Veteran