Senior Cyber Security Engineer

Senior Cyber Security Engineer

Contract, 6 months, could convert to perm

This is onsite: CA 90059

Required exp

• Strong firewall and cybersecurity experience (Fortinet, Palo Alto).
• Experience with firewall replacements, rule migrations, high-availability setups, and VPN reconstructions.

Essential Duties and Responsibilities:

• Design and build enterprise-class security systems for both production and corporate environments.

• Use and maintain software, such as firewalls and data encryption programs, to protect sensitive information.

• Check for vulnerabilities in computer and network systems.

• Recommend security enhancements to management or senior IT staff.

• Proactively seek security gaps with respect to current and projected business direction and spearhead solutions to address those gaps.

• Design and contribute heavily to network architecture including firewalls, WAFs, network segmentation, VLANs, VPNs, and DoS/DDoS mitigation.

• Create solutions that enhance cloud security using available cloud controls/products, third party products, and/or custom-developed systems.

• Understand corporate authentication and authorization systems including AD, LDAP, ADFS, Azure MFA and how to design secure corporate systems with them.

• Understand corporate enterprise tools such as Microsoft Office 365 (A5).

• Develop security standards and best practices for the university.

• Innovate new security systems to address the unique needs of the platform.

• Lead multi-disciplined teams though security initiatives and projects.

• Review and approve security architecture for new projects or changes to existing systems.

TECHNICAL KNOWLEDGE:

• Experience working with various
NIST compliance standards.

• Must be detail oriented; able to detect cyberattacks and watch for minor changes in performance.

• Ability to respond to security alerts and uncover and fix flaws in computer systems and networks.

• Able to effectively communicate information security needs and potential threats to technical and nontechnical audiences within the university.

• Expert knowledge in managing Fortinet, Palo Alto, or similar next gen Firewalls.

• Solid experience managing a virtualized environment using HyperV, Vmware or similar.

• Expert knowledge of access logging, centralized logging, and
monitoring/alerting of security log events such as ELK or Splunk.

• Knowledge of practical encryption methodologies and practices within an enterprise.

• Experience with securing Infrastructure As a Service Platforms such as Azure or AWS.

• Detailed knowledge of network and infrastructure security issues and considerations.

• Expert knowledge of incident response, threat modeling, and mitigation.

• Expertise in identifying security design gaps in existing and proposed architectures and recommend changes or enhancements.