Security Engineer I

Nordic Global is a consulting firm seeking a Security Engineer I to provide operational information security support to their clients. The role involves conducting investigations of security breaches, analyzing risks, and recommending secure technical solutions while collaborating with various teams to enhance cybersecurity initiatives.

Responsibilities:

• Operate, maintain, and troubleshoot cybersecurity technologies
• Recognize cybersecurity risks and make appropriate recommendations for addressing them
• Analyze and recommend secure technical solutions for network/system connections to individuals, contractors, vendors, and business partners
• Implement, support, and evaluate cybersecurity-focused tools and services
• Administer and analyze data from network security devices and services to prevent security threats and reduce risk
• Provide periodic security reporting
• Work closely with IT teams and third-party vendors to identify and provide secure IT solutions
• Assist in developing and implementing security policies and procedures involving network security architecture, network access and monitoring
• Adhere to all policies defined by management related to change control, security, and separation of duties
• Perform system implementations and significant changes to existing systems to ensure that compliance requirements and critical risks are adequately addressed
• Remain current with cybersecurity trends and threats. Identify those that pose risk to systems, develop, and implement appropriate responses
• Develop change management requests related to security technologies
• Other duties as assigned

Requirements:

• Generally requires a Bachelor's degree and 3 years of related experience or 6 years of related experience and no degree
• 3 years of combined relevant work experience in cybersecurity, information technology and/or information security operations
• Experience with cybersecurity toolsets such as: CyberArk, Securelink, Crowdstrike, Nessus, Palo Alto, Varonis, and Windows Defender suite
• Skill in applying and incorporating information technologies into proposed solutions
• Skill in designing the integration of hardware and software solutions
• Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes
• Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)
• Basic/fundamental knowledge of computer networking concepts and protocols, and network security methodologies
• Basic/fundamental knowledge of risk management processes (e.g., methods for assessing and mitigating risk)
• Basic/fundamental knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy
• Basic/fundamental knowledge of cybersecurity and privacy principles
• Basic/fundamental knowledge of cyber threats and vulnerabilities
• Basic/fundamental knowledge of specific operational impacts of cybersecurity lapses
• Basic/fundamental knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)
• Basic/fundamental knowledge of security system design tools, methods, and techniques
• Basic/fundamental knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations
• Basic/fundamental knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth)
• Basic/fundamental knowledge of network systems management principles, models, methods (e.g., end-to end systems performance monitoring), and tools
• Basic/fundamental knowledge of cybersecurity-enabled software products
• Basic/fundamental knowledge of multi-level security systems and cross domain solutions
• Basic/fundamental knowledge of program protection planning (e.g., information technology (IT) supply chain security/risk management policies, anti-tampering techniques, and requirements)
• Basic/fundamental knowledge of configuration management techniques
• Basic/fundamental knowledge of the enterprise information technology (IT) architectural concepts and patterns (e.g., baseline, validated design, and target architectures.)
• Basic/fundamental knowledge of integrating an organization's goals and objectives into the architecture
• Basic/fundamental knowledge in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes
• Basic/fundamental knowledge of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection)
• Basic/fundamental knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc
• Functional understanding of Microsoft Azure AD/Entra, Intune, and 365 operation with specific regard to cybersecurity considerations
• Basic/fundamental understanding of KQL and experience writing queries
• CompTIA Security+, CompTIA Network+, Vmware, CyberArk, CISSP, CEH, SANS GPEN, GCIH