Enterprise IS Security Engineer

Pyxus is a global company committed to creating a better-growing world through sustainable practices. The Enterprise IS Security Engineer will be responsible for designing, implementing, and maintaining security measures to protect systems, networks, and data from cyber threats, while ensuring compliance with industry standards and regulations.

Responsibilities:

• Implement, manage and monitor M365 and Cloud services security tools and controls
• Implement, manage and monitor appropriate identity and access management tools and controls
• Implement, manage, and monitor security measures that support Zero Trust Architecture
• Implement, manage and monitor Endpoint Security systems (application whitelisting, device control, Anti-Virus, encryption)
• Create, maintain and implement Active directory Group Policy Objects related to cybersecurity
• Manage patch rollout processes and network vulnerability remediation
• Administer security awareness training platforms and promote cybersecurity best practices
• Manage password management tools and internal/external certificate infrastructure
• Design and implement enhanced Domain Security structures
• Maintain and enhance cybersecurity frameworks, plans, and IS documentation
• Ensure compliance with cybersecurity standards, IS policies, and best practices
• Implement, manage, and monitor enterprise IDS/IPS and DLP systems
• Conduct vulnerability assessments and oversee remediation activities
• Collaborate with development teams to ensure application security and provide IS security guidance for projects and policies
• Monitor emerging threats (Microsoft, Cisco, CERT, SANS), support incident response and forensic investigations, contribute to C-level updates, and provide 24x7 on-call support

Requirements:

• Fluent English
• Four-year Degree in Information Technology or Business related field
• Certification in industry recognized cybersecurity qualifications (e.g. CompTIA Security+, CISSP)
• Experience in Cybersecurity
• Strong working knowledge of TCP/IP, DNS, Active Directory, IP Address Management
• Working knowledge of Firewalls (ISA, CISCO ASA, Palo Alto)
• Experience with Endpoint Security and SIEM systems
• Experience with Infrastructure related Security tools and procedures – perimeter and internal
• Experience with securing Cloud based workloads, services and resources
• Strong Knowledge of encryption and certificate infrastructure
• Project Management Experience beneficial
• Experience in Cloud Architecture and design in a multi-forest and domain environment
• Knowledge and experience in Windows Server OS and hardware
• Excellent Oral and Written Communication skills
• Excellent Documentation skills
• Consistency and attention to detail
• Ability to work well with others while maintaining a high degree of confidentiality, honesty and integrity
• Able to do international and/or domestic travel as required