The IT Security Engineer functions include daily operations of the security solutions (Firewalls, IDS/IPS, etc.) and the identification, investigation, and resolution of security incidents detected by those systems. Secondary tasks may include the development and/or implementation of security solutions, which fit into the security architecture. The IT Security Engineer is expected to be fully aware of the enterprise’s security goals as established by its stated policies, procedures and guidelines and to actively work towards developing and upholding those goals.
RESPONSIBILITIES
Participate in the design and implementation of enterprise security architecture.
Drive the creation of enterprise security documents (policies, standards, baselines, and procedures)
Manage global security projects and communicate progress to team members and management
Demonstrate a mastery of best practices for network and endpoint security solutions
Perform the deployment, integration, and initial configuration of new security solutions and of any enhancements to existing security solutions.
Maintain up-to-date baselines for the secure configuration and operation of all in-place devices, whether under Information Security control (i.e., security tools) or other asset owners (i.e., workstations, servers, network devices, etc.).
Maintain operational configurations of all in-place security solutions per established baselines.
Monitor all in-place security solutions for efficient and appropriate operations.
Review logs and reports of all in-place devices, whether under Information Security control (i.e., security tools) or other asset owners (i.e., workstations, servers, network devices, etc.). Interpret the implications of that activity and devise plans for appropriate resolution.
Provide on-call support for end users for all in-place security solutions.
Perform analysis of network traffic and alerts to assess, prioritize and differentiate between potential intrusion attempts and false alarms.
Perform additional duties and assignments as requested.
Work outside the standard office 8-hour workday may be required with on-call availability.
Education/Certification:
Bachelor’s Degree in Computer Science, Engineering or related field
Experience:
5 years of Network and/or IT Security Administration experience
PREFERRED QUALIFICATIONS
Education/Certification:
Industry Certification (GCIH, GCIA, CISSP, GSE, PCNSA, PCNSE, etc)
Skills/Abilities:
Strong experience with IPS/IDS, packet/traffic analysis, and related tools
Strong experience of information security principles and practices including but are not limited to the following areas: Next Generation Firewalls; Network Intrusion; Virtual Private Networks; Host Based Security; Malware Prevention; Data Loss Prevention; Digital Forensics; Security Information and Event Management systems
Strong experience with Microsoft operating systems and with network devices
Strong experience with the following programming or computer languages is recommended but not required: T-SQL (MySQL/MSSQL), PHP, Python, Perl, JavaScript, C#, HTML
Strong experience with the following Operating Systems is recommended but not required: Linux distributions (Ubuntu, Kali Linux, Debian), iOS (current versions), Android OS (current versions), macOS (current versions)
Strong analytical and problem-solving skills
High responsiveness with an ability to handle escalations quickly and professionally
Strong verbal and written communication skills
Paycom is an equal opportunity employer and prohibits discrimination and harassment of any kind. Paycom makes employment decisions on the basis of business needs, job requirements, individual qualifications and merit. Paycom wants to have the best available people in every job. Therefore, Paycom does not permit its employees to harass, discriminate or retaliate against other employees or applicants because of race, color, religion, sex, sexual orientation, gender identity, pregnancy, national origin, military and veteran status, age, physical or mental disability, genetic characteristic, reproductive health decisions, family or parental status or any other consideration made unlawful by applicable laws. Equal employment opportunity will be extended to all persons in all aspects of the employer-employee relationship. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, training, promotion, discipline, compensation benefits, and separation of employment. The Human Resources Department has overall responsibility for this policy and maintains reporting and monitoring procedures. Any questions or concerns should be referred to the Human Resources Department. ****To learn more about Paycom's affirmative action policy, equal employment opportunity, or to request an accommodation - Click on the link to find more information: paycom.com/careers/eeoc