Senior Security Engineer Accelered

Roles & Responsibility

Key Responsibilities:

• Design and Implement Security Solutions: Develop and deploy robust security solutions to protect systems and networks.
• Conduct Security Assessments: Perform vulnerability assessments and penetration testing to identify weaknesses.
• Incident Response: Lead investigation of security breaches and provide remediation actions.
• Security Monitoring: Monitor security events and alerts to ensure timely detection and response to threats.
• Policy Development: Create and enforce security policies and procedures.
• Collaboration: Work with IT teams to ensure security is integrated into all systems and applications.
• Training and Awareness: Provide security training and awareness programs for employees.

Requirements

Required Qualifications:

Position Title (Job Code)

Senior Security Engineer

Department

Enterprise Operations

Grade

J

FLSA Status

Exempt

Supervisory Position

No

Full-Time or Part-Time

Yes

Date JD Last Reviewed

October 2024

Manager

Manager, Information Security Operations/ Yibin Dong

Values:

AccelerEd s values are at the core of everything we do, from our ongoing relationships with clients and partners to our daily interactions with team members across the organization. Adopting these values is essential to supporting the company s objectives and inspiring employees to new levels of productivity while helping them achieve their professional goals. Our values include Act with Integrity; Focus on Customers; Engage with Respect; Collaborate Always; and Innovate with Passion. Please read more about these values at the end of this document.

Behavioral Competencies:

See information at the end of this document.

Position Summary:

The Senior Security Engineer will be responsible for identifying potential threats to the IT infrastructure, recommending enhancements accordingly and implementing those technologies. The senior security engineer provides support to ensure applicable information protection policies, procedures, guidelines, and best practices are followed. Performs Security Risk Assessments (SRAs) and compliance reviews to ensure applications and services [YD1] are operating in accordance with established policies and procedures. Educates stakeholders in the assessment process and leads both pre- and post-assessment meetings.

RESPONSIBILITIES

Serve as a security expert in networks, endpoints, and enterprise applications efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices .

Manage vulnerability assessments on various types of networks and topologies;

Execute risk and vulnerability assessments and remediation activities.

Conduct penetration testing on IT infrastructure.

Analyze output from network vulnerability assessments, recommend mitigation strategies and resolve any security incidents through work with pertinent business departments.

Review and provide feedback on security plans and procedures regarding all aspects of LAN, WAN or MANs, as applicable;

Review and provide input into networks and endpoints designs to ensure compliance with security and enterprise architecture.

Review in-house and 3rd-party applications/code for security vulnerabilities and best practices.

Build/enhance security architecture and configure networks and endpoints to enhance the security posture of the enterprise.

Research, design, and advocate new technologies, architectures, and security
products that will support security requirements for the enterprise and its customers,
business partners, and vendors.

Participate in Software Development Lifecycle: code review, QA security testing, launches, etc.

Develop and/or implement automated security testing tools where possible.

Participate in the development of security-related tools and applications, such as multi-platform cookie-based authentication and internal security libraries/frameworks.

Train engineers on common security problems and best practices for writing secure code.

Performs hands-on testing of applications, as well as building and enforce information risk management requirements and structure, including providing practical secure architecture skills and developing and implementing Information Security best practices.

Lead and execute projects on our security roadmap.

Adhere to existing risk management frameworks, such as COBIT, ITIL, and ISO 27002.

Participate in managing incident response for network security events.

Develop and maintain IT security policies.

Provide input and visibility into emerging security technologies, deployment strategies and other security protocols to ensure awareness within the IT security branch.

MINIMUM QUALIFICATIONS, KNOWLEDGE, SKILLS, AND ABILITIES:

Formal Education & Certification

Bachelors degree in information technology, Computer Sciences or equivalent. Master s degree desirable

Possessing at least one professional security certification such as CISSP, CISM, CISA or similar.

Knowledge & Experience

7 years or more of professional experience in IT security including security policy development, security architecture models, and information security regulatory compliance

Must have the knowledge of IT security technologies such as firewalls, intrusion detections systems, antivirus, patch management, etc., and the interest and experience to work on security policy and architecture

Hands-on experience with the following technologies: enterprise system administration across multiple operating systems, IPS management (i.e., Cisco ASA, Palo Alto, TrendMicro), vulnerability scanning applications, Splunk

Experience in engineering and enterprise system administration roles.

Experience developing a standard set of metrics that measure our security posture on a
monthly/weekly basis.

Proven experience developing security policies, procedures, risk registers and incident
response plans

Intermediate to advanced knowledge of information security concepts.

Experience with one or more applications development languages such as Python, Go, Ruby on Rails, Java, C/C++, .NET.

Solid knowledge of and experience with secure web architectures, tools and processes

Knowledge of network architecture and design, network Security, wireless Security and client/server security. Very strong computer networking skills and understanding of networking protocols.

Security of virtual machine environments is highly desirable.

Expert knowledge and hands-on experience of vulnerability assessment/network discovery and associated tools

Understands infrastructure monitoring

Expert in securing Linux and Windows systems.

Experience with various types of firewalls and technologies

Demonstrated process improvement experience

Previous application development experience is very helpful for secure code reviews

Hands-on experience using multiple Amazon Web Services and Azure technologies to support an enterprise environment.

Prior experience as a team lead or role mentoring junior team members.

Experience with threat detection and incident management for web applications

Skills & Abilities

Basic skills needed include:

- Secure solutions development

- Middleware security

- N-tier apps dev infrastructure

- Compliance - PCI, GLB, GLBA, CMMC. GDPR, etc.

- Risk management and security risk assessments

- Code review, reverse engineering

- API s and protocols

- Authentication and authorization. SSO (Single Sign On), MFA (Multi- Factor Auth.).

Enterprise aware (change control, downstream impacts, understanding of cause and effect, change windows, etc.)

Recognized as a strategic thinker and is results oriented

Demonstrated effective strong team player and self-motivator. Ability to work and interface internally with an IT and other functional support groups with minimal guidance

Demonstrated successful experience in a customer-facing role

Demonstrated communicator both written and verbal, with effective presentation delivery and meeting facilitation

Demonstrated effective time management, organizational and documentation skills

Good analytical and troubleshooting skills with strong attention to detail

PHYSICAL REQUIREMENTS:

This job operates in a professional office environment. The employee may be exposed to various components of an office environment such as florescent lighting, pollen, dust, recycled air, cooling fans, semi-enclosed areas, central heating, seasonal warmer temperatures and office noise. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

[For Full Time], Ability to work varying hours on Monday through Friday given the schedules.

Ability to work additional hours as project and job demands arise (including evenings and weekends as necessary). Ability to participate in on-call rotations.

Occasionally required to move 5 - 40 pounds.

Ability to remain in a stationary computer position for extended periods of time.

Ability to use hands and fingers to type.

Ability to reach with hands and arms for using a computer.

Willingness and capacity to work in a cubicle environment at a workstation, and to come and go repeatedly throughout the day as is necessary, to perform various responsibilities

Capacity to communicate and enunciate adequately, in person or via telephone, in a manner which can be understood by others

TRAVEL REQUIREMENTS:

Some travel may be required, up to 10% of the time. The travel may be local or national and may be by car, rail, or air.

VALUES

Act with Integrity: Exhibit honesty and integrity at all times.

Do the right thing in an honest, fair and responsible way. Always consider the impact of decisions on customers, employees, partners, and others you deal with each day.

Focus on Customers : Strive to exceed customer expectations at all times.

Focus on the customer s goal and student outcomes. Ask questions. Build relationships. Listen.

Engage with Respect: Treat colleagues, customers and partners fairly.

Regardless of work experience, tenure, gender, race, cultural background or any other distinguishing factor promoting healthy and positive working relationships between all employees, customers and other stakeholders.

Collaborate Always: Be dedicated to success.

Work together with customers, employees and partners to solve problems and achieve goals. Collaboration is realized through idea sharing, innovating and creating to achieve common goals and objectives. Leverage the knowledge, skills and abilities of others to accomplish tasks.

Innovate with Passion:

Embrace and drive change. Generate innovative solutions for work challenges and evolving markets. Take risks, be curious, inspire creativity.

Challenge the norm. Find and share alternative ways to view or define problems; be not constrained by thoughts or approaches of others.

Create Workable Solutions. Produce innovations and solutions that acknowledge the reality of the situation. Don t allow perfect to be the enemy of progress.

BEHAVIORAL COMPETENCIES

Communication (Oral & Written)

Conveys information clearly and succinctly to diverse audiences including direct reports, colleagues, clients, business partners, advisors and boards in a variety of settings and interactions, such as one-on-one discussions, presentations, group meetings, interviews, sale pitches, consulting sessions, interviews, disciplinary actions and development sessions.

Customer Focus

Anticipates and meets internal/external customer needs. Seeks highest levels of customer satisfaction by delivering excellence in products and services through the process of completing assignments. Establishes appropriate cadence of customer communication and positive working relationships.

Business Acumen

Obtains essential information about a situation, focuses on the key objectives, recognizes the relevant options available for a solution, and selects an appropriate course of action - setting in motion an implementation plan to get the job done. Adapts to unforeseen circumstances, make adjustments as necessary and keep projects moving forward.

Teamwork

Works cooperatively with peers and colleagues to accomplish department and company-wide objectives. Develop and maintain respect and trust with employees, customers, partners and the community -- offering assistance when required and being a team player. Assesses team effectiveness and enhances performance through coaching and goal setting. Encourage cooperation, collaboration and co-ownership of processes.

Problem-Solving & Critical Thinking

Views issues holistically, organization-wide. Anticipates problems and develops creative solutions, using data to make informed decisions. Takes ownership of the problem, shows dedication to see the problem through to successful completion, and follows-up to ensure resolution. Actively and skillfully conceptualize, analyze, synthesize, evaluate and apply information to reach a conclusion. Disciplined thinking that is clear, rational, open-minded and informed by evidence.

Knowledge Seeking

Continually pursues growth and learning. Takes on new challenges and stretch assignments. Asks how can I continue to develop my skillsKnowledge seekers help propel the company forward.

MANAGEMENT BEHAVIORAL COMPETENCIES

Selection and Development of People (Managers Only)

Identifies key attributes and technical skills needed to recruit and/or promote qualified individuals. Demonstrates competence in coaching employees and setting specific, measurable goals to assist with the employee s personal growth and professional development.

Leadership (Managers only)

Influences and maximizes the efforts of others, toward the achievement of organizational goals. The capacity to communicate and motivate a team to translate vision into reality. Effectively plan, organize and direct others to meet company objectives.

Agility (Managers only)

Able to sense and respond to change in the internal/external environment with actions that are focused, fast and flexible. Anticipate and quickly respond to changing customer needs. Create the climate and conditions for fresh solutions by empowering, encouraging and teaching others. Shifts own approach and perspective through customer interaction and needs. Inspire innovation and suggest creative solutions to problems. Willing to take calculated risks.

Collaboration and Teamwork

Collaboration and teamwork are higher expectations for all managers. A manager is more than just a supervisor. Managers contribute their skills towards doing the best work possible for customers and AccelerEd. They work with other managers to solve client and company problems, recognizing that collectively, they are responsible for resolving problems quickly and achieving the best utilization of staff. Managers should work to build loyalty among other team members and departments. They should use opportunities to work with others as a teaching tool to impart organizational knowledge and help others succeed. Guide others as they work through conflicts and disagreements, so that they can become better team members.

[YD1] "servers" can be changed to "services"