Job Description
Job DescriptionRemote
Pay Rate Range: $50 - $55/hr. on W2
Position Description:
- A Security Engineer serves as the security engineer of complex technology implementations in a product-centric environment; is comfortable with bridging the gap between legacy development or operations teams and working toward a shared culture and vision; works to ensure developers create the most secure systems while enhancing the privacy of all system users; and has experience with white-hat hacking and fundamental computer science concepts.
- The Security Engineer will perform security audits, risk analysis, application-level vulnerability testing, and security code reviews; develop and implement technical solutions to help mitigate security vulnerabilities; and conduct research to identify new attack vectors.
Skills Required:
- Security Engineers will possess knowledge and experience in safeguarding sensitive data from cyber-attacks.
- Possess in-depth knowledge of administering and configuring Proofpoint Core Email Protection, including secure email gateway (SEG) and API-based deployments, and Abnormal Security.
- Possess in-depth knowledge of supporting Microsoft Exchange Server (on premises), Exchange Online, and Windows Defender/Microsoft Defender in an email security environment.
- Possess in-depth knowledge of interpreting DMARC policies and reports, troubleshooting SPF and DKIM authentication and alignment issues, and coordinating with third-party vendors to resolve configuration and email-delivery problems.
- Strong understanding of SMTP and email authentication, including SPF, DKIM, and DMARC. Possess in-depth knowledge of email-related DNS records, including MX, A, CNAME, TXT, and PTR records.
- Possess in-depth knowledge of SIEM platforms to query and analyze historical email data and logs for threat investigations and incident response.
- Ability to identify, investigate, and mitigate email threats, including phishing, business email compromise, malware, spam, impersonation, and account compromise. Knowledge of email-related compliance requirements, such as HIPAA.
- Ability to identify configuration issues and security anomalies, work with technology vendors to resolve problems, and follow change control procedures.
- Ability to apply advanced troubleshooting skills for complex email security and mail-flow issues.
- Ability to create and maintain technical documentation, procedures, and instructions for both technical staff and end users.
- Ability to develop and implement technical solutions that reduce security vulnerabilities.
Experience Required:
- This classification must have a minimum of ten (10) years of experience with developing and implementing technical solutions to help mitigate security vulnerabilities.
- Minimum of three (3) years of work experience within the last 4 years with cybersecurity tools and technologies, including IDS/IPS, two-factor and multifactor authentication (2FA/MFA), SIEM, DLP, log correlation, SOC-as-a-Service (SOCaaS), incident response, retroactive malware analysis, raw logs, cleanup and restoration, risk and vulnerability management, and Secureworks Taegis XDR/MDR.
- Minimum of three (3) years of work experience within the last 4 years with security solutions, including Proofpoint Email Protection Gateway; advanced phishing protection such as Abnormal, Cisco CMD, and Darktrace; Microsoft 365, Azure AD, Exchange Online, and Windows Defender; and PRTG monitoring.
- Minimum of three (3) years of work experience within the last 4 years integrating cloud-based email services with on-premises secure email gateway (SEG) solutions to maintain consistent security across platforms.
- Minimum of three (3) years of work experience within the last 4 years monitoring and optimizing email security systems to handle large volumes of email traffic efficiently.
- Minimum of three (3) years of work experience within the last 4 years planning and executing email security system migrations between platforms with minimal downtime.
- Minimum of three (3) years of work experience within the last 4 years with Proofpoint Email Protection Gateway, including managing email blacklisting, sender reputation, and all other features of Proofpoint.
- Minimum of three (3) years of work experience within the last 4 years interpreting DMARC policies and reports, troubleshooting SPF and DKIM authentication and alignment issues.
Education Required
- This classification requires the possession of a bachelor's degree in an IT-related or Engineering field.
- Additional qualifying experience may be substituted for the required education on a year-for-year basis.
- Minimum Bachelor of Science degree in Computer Science or a related field.
Additional Information:
- The consultant must be available Monday through Friday, from 8:00 a.m. to 5:00 p.m. Pacific Time, and participate in assigned on-call schedules to support after-hours escalations and production incidents.
- The consultant must have a reliable laptop equipped with a functional camera and microphone to participate in virtual meetings with the camera enabled, as required.