IT Security Engineer

Job Description

Systematix is currently looking for a general IT Security Engineer with strong InfoSec experience including project-based work focused on Policies and Best Practices, to assist the Security Architect in various Glolbal initiatives, for one of the world’s leaders in Life Sciences technologies. This role is 100% remote, based in North America or Europe.ABOUT THE PROJECT(S)Our client is one of the world’s leading Life Sciences companies, with offices around the globe. Working under the guidance of the Architect of IT Security, you will be responsible for designing, implementing and maintaining a cycle of continuous improvementof the core infrastructure and platform protection systems and services.Your responsibilities in the role will be:

• Work with Security Architect in providing Information Security reviews for business initiatives and projects; providing guidance in these reviews against company security Policies and CyberSecurity Best Practices.
• Create and design new InfoSec Policies and Standards
• Lead engineer for new security projects/initiatives
• Provide as needed support to information security operations
• Performing hands-on tier-3 support for a wide range of security technologies, specifically Endpoint security.
• Respond to timely security event notifications from the security operations center
• Providing InfoSec related guidance and recommendations to internal stakeholders.
• Working closely with various internal stakeholders to review, recommend and engineer security technologies in line with corporate information security program.
• Collaborating with Corporate and Operating Company Information Security teams to drive Information Security projects.
• Participating in vulnerability assessments and penetration testing activities.
• Developing detailed designs for implementation of key security infrastructure upgrades and platform recommendations.
• Defining implementation and testing procedures.
• Providing inputs for formulating security architecture recommendations and design of security services.
• Ensuring adherence to best practices in accordance with information security best practices, industry standards, and corporate policies and procedures.
• Leading large, complex projects and manage resources effectively
• Developing and maintaining appropriate Information Security technical documentation as well as providing reviews and updates of existing policies and procedures.
• Identifying opportunities and recommend solutions for improving service, efficiency and effectiveness.
• Performing Information Security analysis and provide metrics and reporting as required.
• Ensuring compliance with all audit requirements including change control procedures and data security.
• Providing 24x7 support as appropriate.

ABOUT THE QUALIFICATIONS

• 5+ years demonstrated experience in Information Security(InfoSec) and CyberSecurity.
• Working knowledge of various privacy, risk, security standards and practices.
• Hands-on experience with Enterprise Endpoint security and management(Carbon Black, Crowdstrike, Symantec, McAfee, Thycotic, Centrify, Beyond Trust, Avecto, etc.)
• Working with server & endpoint security platform (AV, encryption, HIPS, etc.), firewalls, intrusion prevention, enterprise security event log management, two factor authentication, OS/platform security standards, vulnerability management, data loss preventionand patch management.
• Strong hands-on SIEM and functional GRC knowledge required for this role.
• Strong Network Security - design, strategy and support - Splunk, QRadar, etc.
• Ability to work independently with limited guidance.
• Strong written and verbal communication skills.
• Ability to manage and prioritize multiple tasks and projects.
• Progressive experience leading projects in size and complexity.
• Experience working in collaborative, team-oriented environments with commitment to results and a proven track record of accomplishments.
• Any Security or Network-related vendor certifications a plus.
• Experience with two or more of following vendor solutions a plus: Crowdstrike, McAfee (Web Gateway, DLP, ePO, NSM), Forcepoint (Websense, DLP, NGFW), Nexpose, Nessus, Metasploit, Carbon Black, Zscaler, Splunk
• Experience with Unix/Linux systems is desired, demonstrated experience with Python or other Automation/scripting tools an asset.
• Bachelor’s degree in Computer Science or Information Systems, or the equivalent combination of education and training.
• CEH, GCIH/GCIA/GPEN, CISSP or other equivalent security certification is an asset

ABOUT THE ROLEThis is a 6-month contract with a strong chance of extension or going F/T, to be performed remotely, based anywhere in NA or EMEA.ABOUT SYSTEMATIXSystematix is one of North Americas largest privately owned National Consulting and Resourcing firms. We provide the highest caliber consulting solutions to a diverse client base that includes all levels of Government and all Private Industry sectors.

Keyskills :
Network SecurityInformation Security