Security Engineer - Exciting Venture!

Vaco partners with clients on critical projects and strategic talent acquisitions in the areas of finance, accounting, technology, healthcare, general administration and more.

Vaco has been engaged to identify a proven Security Engineer to join a world-class engineering team in the development and scaling of image processing and machine learning technologies! The Security Engineer will be a member of Security Operations Center (SOC), Information Security Department and performs technical activities for delivering effective host, network, data, and application security services. This position will have primary responsibility for security platforms in the production environment, as well as development, quality-assurance and staging environments. The Security Engineer's responsibilities include security system deployments, configuration, monitoring and reporting. This position will have a lead role in performing vulnerability assessments, security testing, and working with operations and development teams on remediation and mitigation of findings. This position will have a primary role on the Computer Security Incident Response Team (CSIRT) and with Disaster Recovery/Continuity of Operations Planning (DR/COOP). This key resource provides support to planning, designing and implementing security controls which safeguard and monitor events for information systems, enterprise applications and data.

* Analyze, troubleshoot, and investigate security-related, information systems' anomalies based on security platform reporting, network traffic, log files, host-based and automated security alerts. * Maintain, configure, and analyze network and host-based security platforms: * Vulnerability scanning systems and tools * Network-based Intrusion Detection/Prevention Systems (IDS/IPS) * Host-based Intrusion Detection/Prevention Systems (HIDS/HIPS) * File integrity verification and monitoring software * Security Information & Event Management (SIEM) platform * Application (Layer 7) Firewall * Network Access Control (NAC) * Data Loss Prevention (DLP) * Log Indexing and Correlation platform * Anti-virus and anti-spyware console * Firewall and network access controls lists * Web and E-mail proxy and filtering systems * Physical access control systems * Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations. * Provide reoccurring reports for network and host-based security solutions. * Provide CSIRT support as needed in response to information security related events. * Participate in DR/COOP exercises and continuous improvement processes. * Maintain and update relevant system and process documentation and develop ad-hoc reports as needed. * Assist the development of security tool requirements, trials, and evaluations, as well as security operations procedures and processes. * Establish and maintain a strong working relationship with all team members. * Provide off-hours support on an infrequent, but as needed basis. * Successfully manage time and technical responsibilities, set accurate expectations and meet deliverable deadlines while working in a team and information sharing environment.

**Qualification:** * Bachelor's degree in Computer Science, Information Technology or related field or a combination of education and experience. * A minimum of 4-7 years IT experience; at least three of those years focused on IT security. * Must possess or obtain within 12 months from date of hire, an industry recognized information security certification, such as a CISSP (or Associate), SSCP, CEH, or equivalent. * Hands-on experience with 5 of the following: vulnerability scanning, firewall, antivirus & malware analysis, proxy, IDS/IPS, log correlation tools, SIEM, DLP, NAC, and application firewall solutions. * Experience using Microsoft Office and Visio to create documents, presentations, and detailed drawings. * Good technical writing, documentation, and communication skills are required. **Other Skilled Required:** * Comfortable working on both Linux-based and MS Windows-based system platforms with a strong IT technical understanding and aptitude for analytical problem-solving. * Strong understanding of enterprise, network, system and application level security issues. * Understanding of enterprise computing environments, distributed applications, and a strong understanding of TCP/IP networks. * Understanding of the system hardening processes, tools, guidelines and benchmarks. * Fundamental or greater understanding of encryption technologies. * Identify possible or active threats such as DDOS. * Evaluate and recommend security solutions such as IDS/IPS, Key management services for both AWS and DC.