Essential Functions:

• Assists in the planning and deployment of the Company’s information security strategies.
• Develops security standards and best practices for the Company and enhancements as needed.
• Uses penetration testing tools to perform regular vulnerability assessments of internal, DMZ, and external devices, and Cloud resources.
• Participates in incident response events. Utilizes critical thinking to develop plans for preparation, detection, containment, and resolution.
• Designs, tests, and implements security protection measures intended to protect on-premises and cloud-based applications and data.
• Coordinates assigned security projects during implementation phase and ensures timely completion.
• Assists in the day-to-day security team functions (i.e., response, monitoring, and support)
• Communicate and relate complex business requirements and associated risks to technology design/implementation for security-related and other areas of technology.
• Defines, develops, and communicates processes for implementing new policies.
• Identifies unauthorized changes to authentication and authorization systems.
• Protects the integrity, confidentiality, and availability of information in the custody of or processed by the Company.
• Provides on-call security and operational support for production web environment and associated locations.
• Responds in a timely manner to a loss or misuse of information assets.
• Analyzes application security needs based on sensitivity or proprietary nature of data; ensures all systems are utilized for management-approved purposes.
• Researches, evaluates, designs, tests, recommends, and plans implementation of new or improved information security software or devices.
• Reviews computer logs and messages to identify and report on possible violations of security.
• Assists in development of disaster or emergency recovery procedures for information systems and computer environment.
• Provides leadership in understanding and responding to security audit failures reported by internal and external auditing.
• Performs other related duties and projects as business needs require at direction of management.

Education and Experience:

• Bachelor’s degree in Computer Science, Computer Engineering or related Information Technology field.
• Minimum five (5) years experience in information security or information technology.
• Certified Information Systems Security Professional (CISSP) certification, a plus.