Apply on Employer Site

City of Atlanta Department of Watershed Management · 3 months ago

Security Engineer (Information Technology)

Atlanta, GA, United States

Full-time

Onsite

Mid Level

$120K/yr - $120K/yr

4+ years exp

City of Atlanta Department of Watershed Management is responsible for managing the city's water resources and ensuring the security of its IT assets. The Security Engineer role focuses on analyzing and improving security systems, implementing security strategies, and collaborating with various teams to safeguard information and infrastructure.

GovernmentOffice AdministrationWater

Responsibilities

Analyze security systems and seek improvements on a continuous basis

Help drive security standards and best practices

Advise and implement application, and infrastructure security strategy

Perform breach, threat, and vulnerability analysis

Troubleshoot and fix security infrastructure issues

Handle escalations from Cybersecurity Analysts

Interact with, configure, and troubleshoot network intrusion detection devices and other security systems via proprietary and commercial consoles, both local and remote

Report possible threats or software issues

Research weaknesses and find ways to counter them

Assist fellow employees with cybersecurity, software, hardware or IT needs

Develop, implement, and monitor security measures to safeguard information, network infrastructure, and computer systems

Deploy, configure, and monitor new security tools

Help drive user education on information security best practices

Design and execute a comprehensive cybersecurity strategy and architecture

Identify, define, and document system security requirements, proposing solutions to management

Configure, troubleshoot, and maintain security infrastructure software and hardware

Install and manage software for monitoring systems and networks to detect security breaches and intrusions

Monitor systems for unusual activity and establish preventive measures

Plan, develop, implement, and update the company's information security strategy

Provide education and training to staff on best practices for information system security

Analyze alerts for potential security threats

Manage vulnerability assessments and remediation efforts

Conduct risk assessments and develop mitigation strategies

Collaborate on IT projects to ensure security considerations are addressed

Attend meetings to provide input on security-related matters

May perform other duties as assigned

Qualification

Palo Alto FirewallsMicrosoft DefenderVulnerability assessmentNetwork intrusion analysisInformation security standardsUnix/Linux/WindowsNetworking conceptsCloud platformsPacket analysis toolsSoft skills

Required

Bachelor's degree in computer science, Computer, Engineering, Electrical Engineering, Network Security, Information Security, Information Technology, or Mathematics

4-6 years of relevant experience or equivalent combination of education and work experience: undergraduate degree and 1-2 years of relevant experience, graduate degree and 0-2 years of relevant experience

Certifications: GCIA, CISSP GPEN, GWAPT, GCIH, GSEC, OSCP, OSCE, OSCP, CASP+, CompTIA Security + or similar certification

Valid Georgia driver's license

Hands on experience with one or more of the following platforms or technologies: Palo Alto Firewalls, Microsoft Defender(Windows Defender), Microsoft Sentinel, Cisco Umbrella or other EDR platforms, Proofpoint, and Qualys

Advanced knowledge of Unix, Linux, Windows and operating systems

Understanding of Networking concepts

Familiar with Internet of Things (IoT) security concepts

Advanced knowledge of networking protocols and services such as the following: SFTP, HTTPS, SSH, SMB, LDAP, etc

Packet analysis tools (tcpdump, Wireshark, ngrep, etc.)

Vulnerability assessment and remediation through patching and other relevant configuration changes

Experience as a network intrusion analyst

Familiar with Cloud platforms such as AWS, Azure etc

Knowledge on security event triaging, investigations pertaining to Cyber threats such as Business Email Compromise(BEC)

Knowledge of information security standards (e.g., PCI, NIST framework, ISO etc.), rules and regulations related to information security and data confidentiality (e.g., FERPA, HIPAA, etc.)