Sr. SecOps Security Engineer

Senior Security Engineer Competitive base salary - experience required

Excellent medical, dental, vision benefits: 75% to 90% of premiums covered by PFFCU

401K – PFFCU contributes automatic 6% regardless of employee contribution after 1 year

Location: 3325 Street Road, Bensalem, PA 19020

Great benefits, paid time off, and more! Become a part of the team today!

We are seeking a highly skilled and experienced Senior Security Engineer to join our dynamic Information Security team. Reporting to the Manager SecOps, the ideal candidate will possess extensive knowledge and hands-on experience with various network security technologies, including SPLUNK, firewalls, web filtering, zero trust network segmentation, intrusion detection/protection systems, data loss prevention, vulnerability scanners, zero-day threat protection, endpoint technologies, Security Information Event Management, identity and access management (IAM) solutions.

As a Sr Security Engineer you will be responsible for designing, implementing, and maintaining robust security architectures to protect our organization's network infrastructure from cyber threats. You will work closely with all Information Systems department staff to assess and reduce information security risk and ensure compliance with established financial institution regulations.

Job Responsibilities:

Design, implement, and manage SPLUNK SIEM solutions for centralized security monitoring, advanced threat detection, and comprehensive incident response, leveraging extensive experience to optimize and enhance security operation

Manage and monitor intrusion detection and prevention systems, responding to suspicious activities

Deploy and maintain network-based DLP solutions and develop policies to ensure data privacy

Conduct regular vulnerability assessments with tools like Nessus and work on remediation

Deploy zero-day threat protection and develop response strategies

Manage endpoint protection technologies to guard against malware

Implement identity and access management solutions like Okta and RSA

Architect and configure secure network solutions, including FW, NGFW, Web Content Filtering

Maintain security architecture documentation and generate regular security posture reports

Collaborate with IT and compliance teams, providing guidance on security best practices

Technical Skills:

In depth working knowledge of a variety of network perimeter security technologies including:

SIEM solution (SPLUNK)

Web Content Filtering (ForcePoint)

Intrusion Detection/ Protection Systems

DLP - Network Based Data Loss Prevention

Vulnerability Scanners

Zero Day platform

Endpoint technologies

IAM solutions

Firewalls & NGFW

NetFlow Visibility

Minimum Requirements:

Bachelor's degree in Computer Science, Information Technology, or a related field. Advanced degree or certifications are preferred

5 plus years of hands-on information security engineering and administration experience

Demonstrated technical knowledge of perimeter security devices and configuration

Proficiency in virtualized environments, including substantial experience with VMware and other virtualization technologies

Ability to assess problems and situations possesses analytic ability and good judgment

Demonstrate effective business communication and technical writing skills

In-depth knowledge of financial institution regulations, including NCUA (National Credit Union Administration), GLBA (Gramm-Leach-Bliley Act), and PCI DSS (Payment Card Industry Data Security Standard)

Skills/Knowledge/Abilities Required:

In depth working knowledge of a variety of network perimeter security technologies including:

Web Filter (ForcePoint)

Security Information and Event Management (SIEM) (SPLUNK)

Intrusion Detection/ Protection Systems

DLP - Network Based Data Loss Prevention

Vulnerability Scanners (Nessus)

Zero Day technologies (FireEye/Trellix)

Email security technologies

Cisco Secure Workload (CSW)

Cisco Identity Services Engine (ISE)

XDR solutions (Cisco AMP, Trellix, MS Defender)

FireEye (NX and CMS)

MFA (Okta and RSA)

StealthWatch

Working knowledge of Security Risk Assessment Methodology, Vulnerability Analysis and strong knowledge of SIEM technology (SPLUNK)

Monitor and maintain network security appliances to ensure the integrity of all systems from both internal and external entities.

Accurately document current and future InfoSec systems configuration and changes following PFFCU's change control guidelines.

Tier 2 problem escalation contact including rotating afterhours support

Develop a working knowledge of the business side of PFFCU and be able to effectively interface with other IT teams using the technology.

Strong project skills required, specifically the ability to maintain focus and complete projects with multi-month timeframes

Worked with third party service provider

Ability to handle multiple projects at the same time

Ability to think logically and visualize abstract concepts

Ability to clearly communicate technical information to individuals at all levels of the organization and with vendors

Ability to prioritize multiple tasks

Ability to work varying hours, sometimes includes evening and weekend work

Ability to participate in an on-call rotation

Core hours are Monday-Friday 8:00 AM – 4:00 PM