Sr. SecOps Security Engineer
Cybersecurity Tools
Data Security
Endpoint Security
Engineer
Identity and Access Management
Incident Response
Information Security
InfoSec
Log Management
Network Security
Risk Management
Security
Security Information And Event Management
Security Operations
Security Testing
Splunk
Splunk Enterprise Security
Job Description
Police and Fire Federal Credit Union is hiring a Sr. SecOps Security Engineer reporting to the Manager SecOps for an onsite role in Bensalem, PA.
Responsibilities
- Design, implement, and manage Splunk SIEM for centralized security monitoring, advanced threat detection, and incident response
- Manage and monitor IDS/IPS systems and respond to suspicious activity
- Deploy and maintain network-based DLP solutions and develop policies to support data privacy
- Perform regular vulnerability assessments using tools such as Nessus and support remediation efforts
- Deploy zero-day threat protection and develop response strategies
- Manage endpoint protection technologies to help guard against malware
- Implement identity and access management solutions including Okta and RSA
- Architect and configure secure network solutions, including firewalls, NGFW, and Web Content Filtering
- Maintain security architecture documentation and generate regular security posture reports
- Collaborate with IT and compliance teams by providing guidance on security best practices
- Work with IT and compliance teams to assess and reduce security risk and support regulatory compliance
Requirements
- Bachelor’s degree in Computer Science, Information Technology, or a related field
- 5+ years of hands-on information security engineering and administration experience
- Demonstrated technical knowledge of perimeter security devices and configuration
- Proficiency in virtualized environments, including substantial experience with VMware and other virtualization technologies
- Analytic ability and good judgment to assess problems and situations
- Effective business communication and technical writing skills
- In-depth knowledge of financial institution regulations, including NCUA, GLBA, and PCI DSS
- In-depth working knowledge of network perimeter security technologies, including:
- Web Filter (ForcePoint)
- SIEM (Splunk)
- Intrusion Detection/Protection Systems
- Network-based DLP
- Vulnerability scanners (Nessus)
- Zero Day technologies (FireEye/Trellix)
- Email security technologies
- Cisco Secure Workload (CSW)
- Cisco Identity Services Engine (ISE)
- XDR solutions (Cisco AMP, Trellix, MS Defender)
- FireEye (NX and CMS)
- MFA (Okta and RSA)
- StealthWatch
- Working knowledge of Security Risk Assessment Methodology, vulnerability analysis, and strong knowledge of SIEM technology (Splunk)
- Monitor and maintain network security appliances to ensure system integrity from internal and external entities
- Document current and future InfoSec systems configuration and changes following PFFCU change control guidelines
- Tier 2 problem escalation contact including rotating afterhours support
- Develop a working knowledge of the business side of PFFCU and interface effectively with other IT teams
- Strong project skills, including completing multi-month projects while maintaining focus
- Experience working with third-party service providers
- Ability to handle multiple projects, prioritize tasks, and think logically while visualizing abstract concepts
- Ability to communicate technical information clearly to stakeholders at all levels and with vendors
- Ability to work varying hours, including evenings and weekends
- Participation in an on-call rotation
- Core hours: Monday-Friday, 8:00 AM – 4:00 PM
Technologies
- Splunk
- Firewalls, NGFW
- Web Content Filtering, ForcePoint
- Intrusion detection/protection systems
- Data Loss Prevention, network-based DLP
- Nessus
- Zero-day threat protection, FireEye/Trellix
- Endpoint protection technologies
- Okta, RSA
- Security Information and Event Management (SIEM)
- Identity and access management (IAM) solutions
- VMware, virtualization technologies
- NetFlow Visibility
- Zero Day platform
- FireEye (NX and CMS)
- StealthWatch
- MFA (Okta and RSA)
- Cisco Secure Workload (CSW)
- Cisco Identity Services Engine (ISE)
- XDR solutions (Cisco AMP, Trellix, MS Defender)
Benefits
- Excellent medical, dental, vision benefits: 75% to 90% of premiums covered by PFFCU
- 401K: PFFCU contributes an automatic 6% after 1 year regardless of employee contribution