Senior Information Security Engineer

Planet Home is a mortgage industry employer seeking a Senior Information Security Engineer to serve as a high-level technical expert in information security. The role establishes and monitors security standards, evaluates and deploys security technologies, oversees access controls and exceptions, and provides security expertise across technology and application development projects.

Responsibilities:

• Assesses, monitors, and assists with recommended improvements to security procedures for user access creation, modification, and removal
• Conducts research and provides insight to identify, assess, and deploy security technology solutions internally and through vendors, including but not limited to encryption, firewalls, authorization, authentication, intrusion detection, and gateway security controls
• Assists with approval, tracking and reporting of any security exceptions as the need arises
• Prepares status reports on security matters to analyze security risks and response of vendor security controls
• Monitors and proactively recommends solutions for correcting issues related to security technology performance and capabilities of vendors
• Collaborates on critical technology projects to ensure that security issues are addressed throughout the project life cycle
• Designs and develops centralized authorization systems that control the behavior of multiple applications
• Serves as a technical subject matter resource providing expertise in the security domain and provides technical direction to lead appropriate work on security related projects
• Works in an advisory role in application development or acquisition projects to assess security requirements and controls to ensure that security controls are implemented as planned
• Performs other duties as required

Requirements:

• Bachelors degree in Computer Science, Management Information Systems, Engineering, or related discipline, or equivalent work experience required
• At least seven (7) years of Information Technology experience
• Minimum 5+ years of relevant working experience, preferably in IT Security
• Certified in one of the following:
• Certified Information Systems Security Professional (CISSP)
• Certified Authorization Professional (CAP)
• Knowledge of technological trends and developments in technology relating to security and risk management
• Strong understanding of information security controls, risks and threats
• Understanding of and experience with network protocols including switches, routers and routing technologies
• Strong knowledge of enterprise security technologies, e.g. Purview (Insider, DLP, eDiscovery), M365, Microsoft Defender technologies, KQL, SIEM, Identity (SSO, MFA, Conditional Access), and Enterprise vulnerablity tools
• Knowledge of information security standards, data privacy laws, computer crime laws, and federal data protection laws, etc
• Knowledge of information security audit and assessment methodologies, policies, standards, procedures and best practices
• Proficient with MS Office suite of tools
• Excellent verbal and written communication skills
• Work is typically performed in a standard office environment
• The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job
• While performing the duties of this job, the employee is regularly required to sustain predictable work attendance, communicate with others, frequently required to stand, walk, sit, and use arms, hands and fingers to reach, handle or touch
• The employee must occasionally lift and/or move up to 10 pounds
• Specific vision abilities required by this job include close vision, and ability to adjust focus