200+ applicants

Company

Original Job Post

BVS Performance Solutions · 6 days ago

Security Engineer

United States

Full-time

Remote

Senior Level

Wonder how qualified you are to the job?

Maximize your interview chances

BankingConsulting

Comp. & Benefits

Hiring Manager

Barbara Marsden Witt

Insider Connection @BVS Performance Solutions

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Lead the design, development, implementation, and maintenance of security policies, standards, and procedures, collaborating with key managers and data custodians.

Perform patch management using tools like Intune, WSUS, PDQ, Windows Autopatch, and Circle Configuration.

Coordinate third-party evaluations including Internal/External Pen Testing, Web Application assessments, and API Testing.

Configure and maintain vulnerability management programs and perform vulnerability remediation.

Maintain incident response program, oversee incident reporting, and lead security-related audits.

Enhance business continuity planning, assist in creating security awareness training programs, and more.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Security PoliciesPatch ManagementIntuneWSUSPDQWindows AutopatchCircle ConfigurationPen TestingWeb Application AssessmentsAPI TestingVulnerability ManagementIncident ResponseAuditsBusiness Continuity PlanningSecurity Awareness TrainingSIEMAntivirus SoftwareEndpoint ProtectionMail Filter ToolsContent Filter ToolsScanning ToolsNessusRapid 7NmapQualysPenetration TestingMicrosoft 365 DefenderMicrosoft AzurePIMConditional Access Policies

Required

Lead the design, development, implementation, and maintenance of security policies, standards, and procedures.

Perform patch management (Microsoft and Third Party) with tools such as Intune, WSUS, PDQ (Inventory/Deploy/Connect), Windows Autopatch, and Circle Configuration.

Coordinate third-party evaluations including Internal/External Pen Testing, Web Application assessments, and API Testing with IT and other stakeholders.

Configure and maintain appropriate vulnerability management programs.

Perform vulnerability remediation – to include security and critical patching within the environment.

Maintain the ongoing incident response program. Oversee all incident reporting and responses to address security incidents.

Lead all security-related audits and inquiries.

Maintain and enhance business continuity planning and testing.

Assist with the creation of internal and external security awareness training programs.

Minimum 4-year bachelor's degree required.

Preferred

Previous Experience with security tools such as SIEM (Security Information and Event Management) systems, antivirus software, endpoint protection, mail and content filter tools.

Previous Experience with scanning tools (e.g., Nessus, Rapid 7, Nmap, Qualys) and penetration testing methodologies to identify and remediate security vulnerabilities.

Previous Experience with Microsoft 365 Defender suite and Microsoft Azure’s security related features (PIM, Conditional Access Policies, Cloud App security).

Previous Experience with implementing and enforcing change control and security policies around SOC audits.

Previous Experience with encryption algorithms, digital certificates, SSL/TLS protocols, and cryptographic techniques.

Previous Experience with Exchange Online security features and general email system concepts such as DKIM, DMARC, SPF.

Previous Experience with incident response processes, including detection, containment, eradication, and recovery procedures.

Previous Experience with industry regulations (e.g., GDPR, CCPA) and security frameworks (e.g., NIST Cybersecurity Framework, ISO/IEC 27001) to ensure compliance and risk management.

Previous Experience with leading user awareness programs (phishing exercises, user training).

Previous Experience with analyzing complex security issues, identify root causes, and develop effective solutions.

Previous Experience with troubleshooting security incidents, network issues, and system vulnerabilities.

Previous Experience with learning new concepts and staying informed of any emerging security threats.

Certifications such as, CISA, CISSP, CEH, CISM, CCNP Security a plus.