Network Security Engineer

PERFORMANCE & INFORMATION TECHNOLOGY

Support Staff - Position - Other - Other

Job Number : 4600235884

Start Date :

Open Date : 09/10/2021

Closing Date : 12/31/2021

POSITION SUMMARY
The Network Security Engineer is responsible for the development and evolution of security architecture and must be
prepared to demonstrate and apply a thorough understanding of security concepts, technologies, and practices and
provide a high level of technical expertise in the respective areas of responsibility. The incumbent provides technical
leadership in network, system application/platform, cloud security, and database security architecture practices.

ESSENTIAL DUTIES
• Designs, plans, installs, and supports network communications systems, emphasizing security engineering
• Provides subject matter expertise in network security to technology teams and projects
• Responds to security incidents, including engaging other teams and conducting post-incident reviews
• Secures on-prem cloud-based and platforms (e.g., Google Cloud, MS O365, Azure, Windows, Linux, MAC IOS)
• Performs penetration testing and vulnerability scans
• Works with IT technical and business teams to remediate findings from scans, assessments, and audits firewall, web filter, VPN, and extranet management
• Develops and publishes information security policies, procedures, standards, and guidelines based on knowledge of
best practices and compliance requirements
• Provides information assurance support for the development and implementation of security architectures to meet
new and evolving security requirements
• Collaborates with other members of the core strategy teams to build and develop initiatives, develop project plans,
timelines, risk assessments, and other planning documents
• Ensures correct function of network security monitoring tools
• Monitors anomalous security activity, reports, and supports resolution
• Performs as a team member on the IT Security & Network Services team in a day-to-day operation of critical
network and platform security infrastructure
• Recognizes and identifies potential threats to the network and systems connected to the network from the internet, intranet, and cloud based platforms
• Works directly with the customers and vendors in most aspects of the day-to-day activities.
• Required to have prompt, regular attendance in-person or virtually and be available to work on-site, in-person
during regular business hours, and as needed
• Performs other duties as assigned by an appropriate administrator or their representative

Requirements :

MINIMUM REQUIREMENTS
EDUCATION:
? Bachelor's degree

CERTIFICATION/LICENSE:
? Certified Information Systems Security Professional (CISSP), preferred
? Cisco Certified Network Associate (CCNA), preferred
? Cisco Certified Network Professional (CCNP), preferred

WORK EXPERIENCE:
? 5 years experience in Network Security Engineering required
? 5 years of experience as a senior-level security engineer required
o Experience should include expert knowledge of networking and IT security principles, policy development,
network penetration testing, system and application vulnerability assessments, risk analysis, and compliance
testing

KNOWLEDGE, SKILLS & ABILITIES
? Knowledge of information security standards (e.g., NIST CSF, ISO 27001), cloud-based applications (e.g., O365,
Azure, Azure Active Directory, Threat Intelligence, Azure advance security)
? Expert knowledge of networking concepts (LAN/WAN/Wireless)
? Fundamental knowledge of Windows and Linux operating systems
? Ability to work with data parsing technologies (Powershell, Python, etc.)
? Knowledge in digital forensics, data recovery, decryption analysis for security and legal investigations
? Knowledge of web content filtering, vulnerability management, endpoint protection, and email security tools (e.g.,
Cylance, Rapid7, Proofpoint, MS ATP, Securly)
? Ability to communicate effectively
? Strong analytical and problem-solving skills

Compensation :

Salary Grade: IT3

Salary Range: FY'21 APS Salary Schedule (All Positions)

Work Year: ANNUAL

FLSA Status : EXEMPT

Reports to: : Director (IT Sec & Net Services)