Job description

The Security Engineer designs, implements, maintains, and operates Information security (Operations) controls and tools in support of Exeter’s cyber-security program. The Security Engineer designs, implements, maintains, and operates controls according to sound cyber-risk management principles and aligns with relevant standards. The Security Engineer has a strong security foundation and is able to execute projects with only moderate supervision.

Essential Functions:

I, Operates and maintains Security tools to manage risk including, but not limited to:

Configure and operate discovery tools and services to enumerate and map enterprise networks

Configure and operate enterprise vulnerability assessment and configuration assessment tools (i.e. Tenable) and integrate their output into downstream systems

Validate vulnerability findings for false positives and negatives, and document findings for future use

Develop repeatable and automated means for identifying the responsible owner for each system affected by a vulnerability and points of contact for remediation

Work with remediation owners to test effectiveness and ease of solution deployments

Review exception requests received from product owners to enumerate risks associated with certain vulnerabilities

Drive remediation of security risks including tracking of issues and action plans, and partner with patch coordination teams, technology/application owners, and business units to prioritize and enhance remediation efforts

Group and prioritize remediation findings in a manner that increases efficiency

Identify operational roadblocks to ensure timely remediation and countermeasures

Support the development and acquisition of data to inform vulnerability management metrics

Comprehensively document all aspects, technical and otherwise, of project implementations

II. Designs, implements, maintains, and operates Exeter’s security controls including, but not limited to:

Follows a standard methodology to identify and/or detect threats to the IT infrastructure, applications, and other information assets.

Works with various teams to follow a pre-assessment plan/ and assessment schedule for every assessment, conduct threat assessment, and deliver an assessment report.

Demonstrate sustainability of newly implemented tools and processes in areas including vulnerability management

III. Strong understanding of regulatory requirements and compliance issues affecting companies related to privacy and data protection, such as NYDFS, PCI DSS, GLBA etc.

IV. Performs incident response operations and investigations including, but not limited to:

Identify, contain, mitigate, recover, and report on cyber-security incidents affecting the enterprise and business

Analyze and investigate adverse events and incidents using an enterprise security information and event monitoring (SIEM), logs from firewalls, IPS, servers, endpoints and other network devices to determine threats, attack vector, scope of activity, and appropriate response.

Collaborate and coordinate with peers and business unit teams as needed to analyze and respond to adverse events and incidents.

Research the latest threat intelligence, vulnerabilities, exploits, and other relevant threat information and trends on various attackers and attack infrastructure.

Job Type: Full-time

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible schedule
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Parental leave
• Professional development assistance
• Referral program
• Tuition reimbursement
• Vision insurance

Schedule:

• Monday to Friday

Supplemental pay types:

• Bonus pay

COVID-19 considerations:
We are working remotely as a company. Eventually, we will return to office in a hybrid/flex work model.

Ability to commute/relocate:

• Irving, TX 75063: Reliably commute or planning to relocate before starting work (Required)

Experience:

• Cybersecurity: 4 years (Required)

Work Location: One location

jjbodyshop.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, jjbodyshop.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, jjbodyshop.com is the ideal place to find your next job.