Security Engineer II

W-2 ONLY. Hybrid in Dallas- 2-3 days per week in the office.

Overview :

Strong background in information security, hands-on experience with various security tools, and proficiency in managing cloud environments. Proactive individual who can collaborate cross-functionally, design effective security controls and stay abreast of industry trends to ensure our organization remains secure and compliant. Anticipates job expectations while performing design and technical tasks requiring application of standard techniques and knowledge.

Responsibilities :

• Manages security tools such as Okta, Mimecast, CrowdStrike, Defender, Sentinel SIEM and Palo Alto Advanced Threat Protection Detection Services
• Recommends, schedules and applies patches, removes or otherwise mitigates known control weaknesses
• Contributes to incident response activities, including investigation and documentation
• Conducts vulnerability assessments on a regular basis, using a variety of tools and techniques; analyzes vulnerability scan results and prioritizes findings based on risk
• Collaborates with other IT teams to remediate vulnerabilities and mitigate risks; documents vulnerability assessment findings and remediation efforts
• Manages the development and maintenance of security documentation, such as policies and procedures
• Monitors security alerts and escalate incidents as appropriate
• Collaborates with the IT teams to ensure security best practices are followed
• Responds, analyzes, remediates and documents actions performed to resolve threat conditions
• Creates and delivers regular security reports to management and stakeholders, including incident reports, vulnerability assessments, and security metrics.; analyzes security data to identify trends, patterns, and areas of concern, and presents findings and recommendations, using visualizations and dashboards to enhance understanding
• Develops and delivers engaging security awareness training programs for end users, tailored to different roles and departments; conducts simulated phishing campaigns to assess user susceptibility and reinforce training content and analyzes campaign results for improvements
• Performs regular security audits across various IT systems and processes to ensure compliance with security policies, standards, and regulatory requirements; recommends corrective actions to address findings in collaboration with other IT teams
• Develops and implements automation scripts and playbooks to streamline security operations, such as automating security alerts, vulnerability remediation, and incident response tasks
• Proactively searches for indicators of compromise and escalate finding to leadership
• Provides 24 / 7 / 365 support upon request by management on an as-needed basis
• Performs other duties assigned by leadership
• Embraces a culture of continuous service improvement and service excellence
• Stays current on security industry trends

Qualifications :