Sr Security Engineer

Westmoreland Mining LLC is seeking a Senior Cybersecurity Engineer to enhance their cybersecurity posture and maintain compliance with industry regulations. The role involves leading efforts to secure systems against cyber threats and ensuring adherence to relevant compliance standards.

Responsibilities:

• Participate in developing and implementing comprehensive cybersecurity strategies to secure critical systems and information
• Collaborate with cross-functional teams to integrate cybersecurity measures into all aspects of the organization
• Participate in designing, implementing, and maintaining secure and scalable cybersecurity architectures
• Conduct risk assessments and provide recommendations for mitigating potential threats
• Lead incident response efforts, investigating and mitigating cybersecurity incidents
• Develop and maintain incident response plans and procedures
• Conduct regular vulnerability assessments and penetration testing
• Identify and address security vulnerabilities, providing recommendations for remediation
• Ensure compliance with industry regulations, standards, and frameworks (e.g., [specify relevant standards such as HITRUST, NIST, ISO 27001, PCI, etc.])
• Lead and participate in internal and external compliance audits
• Develop and deliver cybersecurity training programs for employees
• Stay current with industry trends and emerging threats, ensuring continuous improvement in cybersecurity practices
• Work closely with IT teams, management, and other stakeholders to ensure effective communication, collaboration, and transparency on cybersecurity initiatives
• Provide guidance and mentorship to junior cybersecurity staff

Requirements:

• Bachelor's degree in computer science, Information Technology, or relevant job experience
• 5 years of experience in cybersecurity roles, focusing on engineering, architecture, and compliance
• Proficient in security technologies, tools, and methodologies
• Any relevant certifications such as SSCP, CISSP, CCSP, CGRC, CEH, CompTIA Sec+, CompTIA CySA+, CompTIA PenTest+
• Strong understanding of regulatory and compliance requirements
• Expertise in cybersecurity engineering, including designing and implementing security solutions
• Proficient in firewall and intrusion detection/prevention protocols
• Strong knowledge of encryption technologies and secure network communication
• Experience with security information and event management (SIEM) systems
• Thorough understanding of compliance frameworks and audit processes
• Excellent problem-solving and analytical skills
• Effective communication and collaboration skills