Information Security Engineer – Santa Clara, CA (Relocation Offered and Possibly Open to Remote) Contract or Contract to Hire

TITLE: Information Security Engineer

Location: Tulsa, Oklahoma, Los Angeles, Ca (by LAX) or Santa Clara, Ca (RELOCATION OFFERED and POSSIBLY OPEN TO REMOTE)

Hierarchy: Reporting to the VP, Information Technology that DKKD Staffing just placed

Duration: Full Time, Salary – Direct Hire

Salary: To be discussed

NOTE: Please email application questions and job questions to Di@DKKDstaffing.com

• Unable to support Corp to Corp
• Those authorized to work in US encouraged to apply.
• DKKD Staffing does not sponsor and cannot support H1, TN, etc. No outside agencies please.

APPLICATION QUESTIONS:

• Name:
• Best Contact Info:
• Your Linked In:
• Where do you live and your desired geographical location:
• Why looking for a new job:
• Availability for interviews and a new job:
• Are you open to relocation if required:
• Do you have an active Passport:
• Are you open to travel if needed:
• Are you authorized to work in US (US, Greencard, Other):  Do you require sponsorship at any time or will you in the future?
• Salary Expectations: (I need a range) $
• Sizes of staff overseen and their titles: (include # of direct reports)
• Budgetary Responsibility: $
• Education/Certs/Degrees: (also indicate which certs are active)
• Who Referred You/ How Did You Hear About Job/ DKKD Staffing:

JOB SCREENING QUESTIONS/ REQUIREMENTS:

(Please provide your# of years of experience per bullet and last year used. Elaborate if needed. If no experience, please indicate none or NA)

• 5+ years of Security Engineering with experience designing, deploying Information Security Policies / Standards and Security infrastructure:
• Advanced experience with firewalls, network access control, PKI certificates, MFA, IDS/IPS, MDM, and SSO:
• Experience using system management tools:
• Experience using security penetration testing, scanning and correlation tools:
• Strong understanding of security topics such as access control, network and systems hardening, threat modeling, encryption, vulnerability management, digital forensics and incident response:
• Experience with compliance and risk management frameworks, such as NIST, PCI, SOX, and ISO:
• Direct experience with anti-virus software, intrusion detection, firewalls and content filtering:
• Experience with systems like Darktrace AI and Atigena immune response systems:
• Data Loss Prevention systems:
• Risk assessment tools, technologies and methods:
• Designing secure networks, systems and application architectures:
• Disaster recovery, computer forensic tools, technologies and methods:
• Strong understanding of endpoint security solutions:
• File Integrity Monitoring:
• Liaison between other departments, employees, management and vendors:
• Working with a Global company:
• Working in the travel industry a plus:

Job Summary

Information Security Engineer (ISE) helps to safeguard the organization’s computer networks and systems. They plan and carry out security measures to monitor and protect sensitive data and systems from infiltration and cyber-attacks. As part of a larger IT team, the ISE reports directly to the Vice President of Information Technology.

Duties and Responsibilities

 The primary goal of the ISE is to assist in protecting the organization’s information, computer systems and networks, whether on-prem or in the Cloud. Responsibilities include:

• The ISE helps plan and carry out the organization’s information security strategy based on our Information Security Policies and Standards.
• Recommends security enhancements to management as needed.
• Develop strategies to respond to and recover from a security breach.
• The Information Security Engineers is also responsible for helping educate the workforce on information security through training and building awareness. The ISE will accomplish this through efforts with the Human Resources department.
• Ensure that appropriate Information Security hygiene is in place, including patch management.
• The ISE must constantly monitor the organization’s network and systems for security breach or intrusions. To do so they will install and utilize software that helps to notify them of intrusions, and watch out for irregular system behavior, such as infrastructure monitoring, log review, SIEM, intrusion detection, and other industry-standard Information Security practices.
• Proactively research and communicate emerging security threats, proposing recommendations for implementing short- and long-term solutions to decrease threat vectors and enhance overall security posture.
• Participate in our Incident Response team. The ISE also leads the technical and forensic investigation into how the breach happened and the extent of the damage and prepares reports of their findings to be reported to management.
• Provide escalation support for all security incidents or escalations.
• Create and maintain network & systems documentation to include system documentation, security procedures, configuration diagrams and asset management.
• Be available on-call as required to rapidly troubleshoot any problems resulting from changes or unexpected outages or security incidents.
• If a breach has occurred, the ISE notifies the Security and Compliance committee and leads incident response activities to minimize the impact.

Information Security Engineer Skills

A strong multi-tasker with a keen eye for detail, a successful Information Security Engineer will be required to plan and think one step ahead of cybercriminals. They are well organized and thrive in fast-paced, high-stress scenarios.

Core skills:

• Ability to prioritize projects
• Comfortable working in a fast-paced environment
• Excellent communication skills with an ability to communicate network security issues to peers and management
• 5+ years of Security Engineering with experience designing, deploying Information Security Policies / Standards and Security infrastructure.
• Advanced experience with firewalls, network access control, PKI certificates, MFA, IDS/IPS, MDM, and SSO.
• Experience using system management tools.
• Experience using security penetration testing, scanning and correlation tools.
• Strong understanding of security topics such as access control, network and systems hardening, threat modeling, encryption, vulnerability management, digital forensics and incident response.
• Experience with compliance and risk management frameworks, such as NIST, PCI, SOX, and ISO.
• Direct experience with anti-virus software, intrusion detection, firewalls and content filtering
• Experience with systems like Darktrace AI and Atigena immune response systems.
• Experience with Data Loss Prevention systems.
• Knowledge of risk assessment tools, technologies and methods
• Experience designing secure networks, systems and application architectures
• Knowledge of disaster recovery, computer forensic tools, technologies and methods
• Strong understanding of endpoint security solutions.
• Understanding of File Integrity Monitoring.
• Critical thinking skills and the ability to solve problems as they arise
• Excellent communication skills with prior experience acting as a liaison between other departments, employees, management and vendors.