Web Protection Engineer

Job Description

: The Cybersecurity team develops and manages next generation solutions, systems and assets that support the business and its affiliates. Working in a collaborative, creative and fun environment, we offer technology professionals a wide range of opportunities to utilize and further develop their skills while helping people live healthier lives. Candidates will need to have fundamental hands-on experience with core infrastructure operating systems, host compliance, file integrity monitoring solutions, and advanced malware defensive technologies. Candidate will have experience with fast paced, incentivized business operations that need to be agile while adhering to diverse regulatory and security framework expectations.

Essential Functions:

• Partners with project teams, including developers, to integrate security requirements into application projects, leveraging tools such as Microsoft Azure/Entra and Ping AM for hands on configuration of enterprise and affiliate web application protection
• Work with project teams to support production and non production release schedules
• Coordinates with product vendors and service providers supporting technical security capabilities and processes
• Manage system/application environment, configuration, policy and required operational activities on assigned technical security solutions
• Monitors, reports on, and enhances performance of assigned technical security solutions
• Provides security technology incident response and problem management. Troubleshoots software and/or hardware issues/failures on assigned technical security solutions. Resolves alerts and performs remediation activities as required for return-to-operation.
• Accountable for follow-up of all security work requests including collaborating with other IT areas to ensure timely completion/resolution and obtainment of appropriate approval levels.
• Supports escalations, known issues and out of cycle requests on multiple security solutions for the enterprise and its subsidiaries
• Supports the development and maintenance of operational documentation for technical security solutions (e.g. procedures, engineering diagrams, knowledgebase, etc.).
• Collects, analyzes, synthesizes and presents data on technical security solutions and processes to peers, leadership and business stakeholders
• Assists the migration, upgrade and disposal of complex security capabilities and evaluates risks and impacts
• Collaborates with other business areas to deliver on work group initiatives for the enterprise and its subsidiaries
• Assists with developing continuous testing and validation of product performance and gap analysis for continuous security hardening processes
• Assists execution and alignment to security reference architecture standards and published blueprints.
• Assists Disaster Recovery planning, design, implementation and exercises on security technology solutions
• Assists remediation actions as a result of threat and vulnerability assessments or audits
• Provide training to others on security capabilities, processes, procedures and operational task

Additional Required Qualifications:

• Hands on configuration experience with Microsoft Azure platform including Entra.
• Experience with conditional access management policy configuration.
• Experience with SAML integrations.
• Experience with scripting language such Python, Powershell, or similar.
• Exposure to Project Management methodologies like Waterfall, Agile, Lean or SAFe methodologies
• Capacity to work independently and willingness to seek advice/assistance.
• Understanding of security concepts and controls for network, application, and operating systems.
• Ability to troubleshoot and investigate security related issues and having experience or knowledge with vulnerability and patch management.
• Strong technical, analytical, and administrative skills.
• Strong corporate work ethics.
• Strong Documentation and Review Skills.
• Have strong problem-solving skills.
• Maintain a positive attitude.
• Possess excellent interpersonal and written communication skills.
• Have the desire and ability to learn new things fast.
• Strong Solutioning Skills to help facilitate new technology gaps
• Want to be part of an efficient and effective team.
• Display an ownership attitude and drive initiatives to completion.
• Are a team player that recognizes the bigger picture and understands the value of teamwork.

Required Work Experience:
4+ years related work experience
2+ years in Cybersecurity
2+ years Information Technology Infrastructure

Required Education:
Related bachelor’s degree or additional related equivalent work experience

Required Licenses and Certifications:
Systems Security Certified Practitioner (SSCP)

Additional Preferred Qualifications:

• Scripting and application development background and desire (software development, scripting, Python, JavaScript, PowerShell, and/or Java) will be heavily considered.
• Understanding of LDAP technologies such as Active Directory.
• Azure Privileged and non-Privileged access management.
• Well versed in the OWASP Top 10.

ARC Group is a Forbes-ranked a top 20 recruiting and executive search firm working with clients nationwide to recruit the highest quality technical resources. We have achieved this by understanding both our candidate's and client's needs and goals and serving both with integrity and a shared desire to succeed.

At ARC Group, we are committed to providing equal employment opportunities and fostering an inclusive work environment. We encourage applications from all qualified individuals regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or any other protected status. If you require accommodations during the recruitment process, please let us know.

Position offered with no fee to candidate.