Information Security Engineer 3

Position Overview
We are looking for a skilled Information Security Engineer to lead and participate in security incident response activities and enhance our cybersecurity posture. This role involves conducting technical investigations, providing security consulting, and developing robust security solutions across various platforms.

Key Responsibilities

• Incident Response: Lead or participate in computer security incident response activities for moderately complex events. Conduct thorough investigations and digital forensics to identify causes and recommend future mitigation strategies.
  
• Security Consulting: Provide expert security consulting on medium-scale projects, ensuring compliance with corporate information security policies and standards.
  
• Solution Development: Design, document, test, maintain, and provide recommendations for moderately complex security solutions in areas such as networking, cryptography, cloud, authentication, email, applications, and endpoint security.
  
• Log Review: Review and correlate security logs to identify potential threats and vulnerabilities.
  
• Security Implementation: Utilize knowledge of industry-leading security solutions and best practices to implement critical components of information security, including availability, integrity, confidentiality, risk management, and incident response.
  
• Risk Assessment: Identify security vulnerabilities, perform risk assessments, and evaluate remediation alternatives.
  
• Collaboration: Work collaboratively with peers, colleagues, and managers to resolve security issues and achieve organizational goals.
  

Required Qualifications

• Experience:
  
  • 4+ years of Information Security Engineering experience, demonstrated through a combination of work experience, training, military experience, or education.
• Mainframe Security Solutions:
  
  • 5+ years of experience developing mainframe security solutions using RACF, REXX, zSecure, CARLa, and other tools.
• Risk Assessment:
  
  • 5+ years of hands-on experience in mainframe security risk assessment and remediation.
• RACF Expertise:
  
  • 5+ years of experience with Resource Access Control Facility (RACF), including issuing commands and performing diagnostics.
• Technical Skills:
  
  • 5+ years of experience with Job Control Language (JCL) and Time Sharing Options (TSO).
  • Proficiency in REXX, CARLa, and zSecure tools.

Additional Skills

• Advanced Security Knowledge: Strong understanding of information security practices and policies.
• Problem-Solving: Ability to manage complex issues and develop effective solutions.
• Communication: Excellent verbal and written communication skills to articulate security concepts to various stakeholders.

Education: Bachelors Degree