Echelon Risk + CyberRemote
Senior Security Engineer (MSP or MSSP) - Remote (USA)
United States of America
Full Time
2 hours ago
No H1B
Key skills
CCSPCISSPCEHCISMManaged IT or Security services MSPManaged IT or Security services MSSPSecurity policies and proceduresSecurity assessmentsSecurity auditsCompliance with security standardsAzureAWSCloud Security Posture Management (CSPM)SaaS platform securityEndpoint protection solutionsMobile Device Management (MDM)Vulnerability scanningPenetration testingIdentity and Access Management (IAM)Single sign-on (SSO)Privileged Access Management (PAM)User provisioning and access controlsData Loss Prevention (DLP)Disaster recovery planningBackup and replication solutionsSecurity configuration benchmarks CISSecurity configuration benchmarks NISTRegulatory complianceSecurity Information and Event Management (SIEM)Managed Detection and Response (MDR)Intrusion Detection Systems (IDS)Intrusion Prevention Systems (IPS)Network security policiesFirewall management Palo AltoFirewall management FortiGateEndpoint security tools CrowdStrikeEndpoint security tools SentinelOneEndpoint security tools FortiEDRSecurity Operations Center (SOC)Security assessments and auditsDevSecOps practicesIAMSSOSingle Sign-OnSaaSAgileCommunicationNetwork SecurityCloud Security
About this role
Echelon Risk + Cyber is a leading cybersecurity consulting firm dedicated to defending security and privacy rights. They are seeking a highly skilled Senior Security Engineer to implement security policies, conduct assessments, and develop tailored security solutions for clients.
Responsibilities:
- Implement and enforce security policies and procedures based on industry standards
- Conduct regular security assessments, audits, and ensure compliance with security standards
- Design and implement secure cloud solutions (Azure and AWS)
- Utilize Cloud Security Posture Management (CSPM) technologies
- Ensure the security of SaaS platforms, including email, file sharing, and 3rd party applications
- Configure and manage security controls for servers and endpoints, including deploying and managing endpoint protection solutions
- Implement security policies for Mobile Device Management (MDM)
- Conduct regular vulnerability scans and automated penetration tests utilizing in-house tools and develop remediation plans for identified vulnerabilities
- Implement and manage IAM solutions, including single sign-on (SSO) and privileged access management (PAM)
- Ensure proper user provisioning and access controls
- Lead technical implementations of data protection services, including Data Loss Prevention (DLP) solutions
- Participate in the development and maintenance of disaster recovery plans and procedures
- Review and ensure backups, redundancy, and replication solutions meet availability and recovery best practices, including performing regular recovery tests
- Conduct security reviews, assessments, and hardening activities across key systems from endpoints, servers, network infrastructure, and Cloud services
- Apply and enforce security configuration benchmarks (e.g., CIS, NIST)
- Ensure compliance with regulatory requirements and industry standards
- Implement and manage security information and event management (SIEM) systems
- Deploy and maintain managed detection and response (MDR), intrusion detection systems (IDS), and intrusion prevention systems (IPS)
- Configure and manage network security policies across perimeter and internal network equipment, including firewalls and wireless access points
- Participate in incident response planning and tabletop exercises, and develop incident response plans and playbooks
- Assist with the implementation and configuration of security awareness training programs and solutions
- Work closely with clients to understand their security needs and provide tailored solutions
- Collaborate with cross-functional teams to ensure security is integrated into all aspects of IT infrastructure, and develop technical security standards and operational procedures
Requirements:
- Bachelor's degree in Computer Science, Information Security, or related field
- Relevant certifications: CCSP, CISSP, CEH, CISM, etc
- Experience working in managed IT or Security services (MSP or MSSP), handling numerous clients and environments simultaneously
- Strong understanding of security technologies and frameworks
- Excellent problem-solving and analytical skills
- Strong communication and interpersonal skills
- Applicants must have authorization to work in the United States without current or future visa sponsorship
- Familiarity with regulatory requirements such as FFIEC, SOC 2, ISO 27001, GDPR, CMMC, HIPAA, PCI-DSS, etc
- Familiarity with popular security frameworks such as CIS, NIST, ISO, SOC2
- Experience with enterprise security technologies (firewalls such as Palo Alto and FortiGate, endpoint security tools such as CrowdStrike, SentinelOne, and FortiEDR)
- Experience working in or with a Security Operations Center (SOC)
- Experience participating in Security Assessments and Audit efforts
- Familiarity with DevSecOps practices and tools
- Ability to be agile and juggle multiple clients, initiatives, and priorities effectively
- Skilled in gathering, assessing, and presenting technical security metrics and trends