The Security Engineer is responsible for ensuring the confidentiality, integrity, and availability of cloud-based and Internet accessible systems and services. If you are looking to work with or increase your knowledge of Email Security, this might be the role for the next step in your career. Great opportunity to join a team of 6 engineers and build a long-term career.

RESPONSIBILITIES-

• Engineer and administer email management platforms from Microsoft and Cloudflare.
• Improve spam and phishing message filtering, reducing undesired email messages.
• Examine email architecture and configurations and make recommendations to improvements.
• Update and manage email connections and configurations related to SPF and DKIM.
• Expand email filtering capabilities utilizing email technologies such as DMARC.
• Update security configurations based on discovered vulnerabilities.
• Review email logs and alerts and determine methods for improved security posture.
• Draft and deliver email metric reports to management.
• Coordinate with email vendors and implement new email security features.
• Ensure the confidentiality, integrity, and availability of cloud-based and Internet accessible systems and services.

MINIMUM REQUIREMENTS -

• 3-5 years of IT experience.
• 2-3 years of security experience.
• 1 years of cloud experience.
• 2 years experiencewithemail management platforms such as Microsoft Defender.
• 2 years experiencewithsecurity protection platforms.
• 2 years experiencewithincident response activitieson Windows and Linuxsystems.
• 2 years of experience identifying and remediating security vulnerabilities.
• 1 years of experience performing security investigations.
• 1 years experiencewith runningscriptsand scripting languages.
• Strongexperience in Microsoft Defender, Azure, and Office365 security components and capabilities.
• Strong understanding of TCP/IP protocols,DNS, and routing.
• Strong understanding ofemail fundamentals and process flows, such as SPF, DKIM, and DMARC.
• Strong written and verbal communication skills.
• Ability to troubleshoot securityproblems independently.
• Ability to accurately document security incident reports.
• Ability to properly handle confidentialand sensitiveinformation.
• Ability to pass US federal government background investigation.

• Bachelor's degree in information systems or comparable experience
• CISSP, MCSE, AZ-500, SSCP or Security highly desired

ESSENTIAL FUNCTIONS -

• Monitor various email platforms for security design flaws, configuration flaws, and other security related service changes.
• Reduce quantity of spam and phishing messages reaching employees.
• Evaluate security implications of current processes, service requests, and proposed changes.
• Respond to security discoveries and events and participate in investigations.
• Coordinate employee phishing simulations.
• Ensure configurations remain in compliance with security requirements.
• Ensure known vulnerabilities are managed and mitigated in a timely manner.
• Ensure regulatory controls are followed and evidence of violation is maintained for review.
• Maintain current knowledge of security practices.
• Review security bulletins, assess impact, update configurations accordingly.

ADDITIONAL CHARACTERISTICS -

• Knowledge of NIST, CIS Top 20, and ISO 27001 controls
• Knowledge of business impact and critical needs for IT services
• Ability to manage tasks independently and escalate as necessary
• Ability to work with and coordinate between multiple groups
• Ability to function in a dynamic environment
• Ability to manage multiple tasks and meet deadlines
• Ability to prioritize appropriately
• Ability to pay attention to detail
• Desire to learn security best practices and promote security throughout the organization

#LI-GW1