CASY-MSCCN Jobs

Overview

The security and network director is responsible for leading a team to implement, maintain, monitor and manage secure solutions. The director will be responsible for managing firewalls, help with network designs and the company security tools. The director delivers these solutions in accordance with the organization’s architectural designs, best practices, and regulatory or compliance requirements. As risks change, the director is responsible for recommending modifications and enhancements to ensure the organization is evolving with the threat landscape.

The director is expected to help execute the corporate security strategy with the CISO, security leadership and other senior security staffers and technologists. Recipients of the network implementations and management include IT infrastructure, application development, security operations, security audit and end users. With an emphasis on securing systems, applications, third-party connections, service providers and ancillary systems, the security engineer is responsible for securing business-to-business initiatives, third-party relationships, outsourced solutions, and vendors. Considered a highly knowledgeable individual, the security engineer is expected to implement, monitor, and manage secure solutions that address modern day issues.

Essential Functions:

• Manage a team of security operators/responders and interact with cybersecurity leadership and business stakeholders.

• Implement a cross-functional team working closely with cybersecurity, IT and developers.

• Handle day-to-day leadership of implementation, monitoring and operational support of hardware, managed solutions and service provider relationships.

• Actively participate and lead security team meetings that facilitate secure network design and execute to the guidance on the network infrastructure.

• Engage in information security projects that evaluate existing security infrastructure and propose changes as defined by security leadership and architects. Additionally, deliver projects on time, within budget and in accordance with service level agreements (SLAs).

• Assist with incident response and system stability issues as they occur. This may include involvement outside of regular work hours, and responsiveness is expected.

• Work in tandem with architects, the security operations center (SOC), incident responders (in cases of anomalous activity and host compromise), and technology infrastructure and development team members.

• Respond to and handle service and escalation tickets within SLA expectations.

• Participate regularly in change project and change management meetings.

• Research, validate and deploy solutions meeting security and business needs.

• Focus on driving security efficiencies, enabling security team members to work on more advanced tasks.

• Conduct performance testing to stress the limitations of security solutions while at the same time ensuring business innovation and day-to-day processes are not negatively impacted.

• Perform other duties as assigned.

Required Qualifications:

Education:

• Bachelor’s degree preferred in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.

Experience:

• Three to Five-plus years’ experience in leading teams of complex network infrastructure. 5 plus years of network experience.

• Knowledge and certifications in Palo Alto, Citrix, Fortinet products

Licenses:

• Preferable, but not required: CISSP, CISM, CRISC, CISA, GCIH, GCFA, GCFE

Preferred Qualifications:

Education:

• Bachelor’s degree preferred in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.

Experience:

• Three to Five-plus years’ experience in leading teams of complex network infrastructure. 5 plus years of network experience.

• Knowledge and certifications in Palo Alto, Citrix, Fortinet products

Other:

• Preferably at least 5+ years’ experience in cybersecurity, including compliance and risk management with a system and network security engineering background.

• Highly technical and analytical expertise, with a proven deep background (preferred 5+ years’ IT experience in addition to cybersecurity) in technology design, implementation and delivery.

• Experience in cloud computing technologies, including software-, infrastructure and platform-as-a-service, as well as public, private, and hybrid environments.

• Extensive knowledge of traditional security controls and technologies, such as Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), public key infrastructure (PKI), identity and access management (IDAM) systems, antivirus and firewalls, in addition to newer offerings such as endpoint detection and response (EDR), threat intelligence platforms, security automation and orchestration, deception technologies and application controls.

• Excellence in communicating business risk from cybersecurity issues.

• Experience managing, IDS/IPS, other network firewalls and system monitoring tools.

• Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.Experience with Amazon Web Services (AWS), Microsoft Azure and Oracle cloud environments.

• Proficient with scripting in Python, JavaScript, PowerShell, PHP or Ruby.

• DevOps background with experience in compliance obligations.

• Experience with one or more of the following: ISO 27001, NIST, PCI Data Security Standard (PCI DSS), HIPAA, Health Information Technology for Economic and Clinical Health (HITECH) Act, SOX, the General Data Protection Regulation (GDPR), Center for Internet Security (CIS) standards or Service Organization Controls (SOC) 2.

• Working knowledge of Windows, Linux and Unix.

• Familiarity with state privacy laws.

• Ability to think strategically and tactically, with effective decision-making skills.

• High degree of integrity, trustworthiness, professionalism and character.

Licenses:

Preferable, but not required: CISSP, CISM, CRISC, CISA, GCIH, GCFA, GCFE

Working Environment and Travel Requirements:

Corporate office environment. Hybrid office 2-3 times per week in the office.

Benefit Information:

ABM offers a comprehensive benefits package. For information about ABM’s benefits, visit:

https://www.abm.com/wp-content/uploads/2023/11/2024-Recruitment-Staff-Mgmt-11.6.23.pdf

REQNUMBER: 87093

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.