Sr. Security Engineer (Architect Level)

Hi Dave,

This is Vishnu Saraf from ThinkByte and currently I am hiring for Sr. Security Engineer (Architect Level) role with my direct client Davie, FL

Job Description:

• Provide an interface between the business and IT for technical security projects.
• Create security strategies to improve controls and architecture for critical security infrastructure including endpoints, mobile devices, authentication and authorization, logging, detection.
• Maintain the security information and event management solutions SIEM.
• Managed and lead projects.
• Lead and be a mentor to other team members.
• Provide subject matter expertise on system, application, and network security.
• Ensure complement deployment of the Endpoint security strategy to enable early detection of threat and malicious activities.
• Participate and lead during security incident response actions, support detection and classification, define containment, remediation and recovery strategies with the team.
• Ensures security requirements are been identified and developed early in project lifecycle.
• Monitor and verify that the infrastructure in place is appropriately protected from internal or external threats, being internal, cloud, external.
• Identifies security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives.
• Assess risk arising from third-parties, vendors and partners in our ecosystem and design controls.

Experience/ Skills:

· Ten or more years delivering information security infrastructure support and related services with a minimum of 15 years IT experience

· Practical knowledge of any combination of Payment Card Industry (PCI), GDPR, NIST standards, or ISO27000 series.

· At least one industry standard certification such as Security+, GSEC, GCIH, Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA) or other security vendor certification.

· Team player able to work effectively at all levels of an organization with the ability to influence others to move toward consensus.

· Excellent verbal and written communications skills.

· Ability to solve complex problems in a timely manner by working with multiple stakeholders.

· Understanding of and practical experience with internal/external certificate authorities, Microsoft Windows preventive and detective controls, Microsoft Active Directory design/architecture and security, multifactor authentication.

· Experience of network design, mobile security, proxies, network and firewall security technologies and vulnerability management and scanning.

· Experience with DLP and IPS/IDS systems.

· Experience with the administration and implementation of PKI Solutions

· Hands-on expertise operating in an AWS or Azure environment a plus, including architecture and security capabilities in the cloud.

· Knowledge of web application security, browser security models, and application security vulnerabilities such as the OWASP Top Ten.

· Deep understanding of network attacks, DDoS, Phishing, email protocols/security/spam, encryption, authentication, logging and log analysis, IP and device reputation, and security rules and policies.

· High degree of skill and knowledge in managing, Endpoint security solutions, SIEM and part taking in incident response initiatives.

· Flexibility to travel as required up to 15% overnight travel.

##Hospitality or Casino industry exp is good to have