IT Security Principal Engineer

Description

The IT Security Principal Engineer position is working within an IT security team to review, evaluate, design, engineer, implement, and or maintain advanced security products, processes, and associated policies for the Corporation. The intended engineered solutions can represent IT security functions in areas such as for example threat and vulnerability management, networking, intrusion detection, application security, identity and access control, and risk management in support of IT security policies, processes, and standards. The IT security technical engineer also must support the continued monitoring, maintenance, and continual improvement of the IT security infrastructure. The person in this position will be a leader in the IT organization and considered a subject matter expert in the field of IT Security. This position requires advanced, hands-on security expertise. This position may be called upon for around-the-clock, 7 days a week support of security alerts within the QD IT infrastructure and applications.

Responsibilities

• Develops security strategies and solutions to improve, augment and enhance the posture of IT Security Engineer, install, upgrade, maintain, and or support a variety of security tools. These may include products such as network scanners, application scanning, network and application access control, intrusion detection systems, data loss prevention products, security incident and event management (SIEM), etc. Assists in the coordination and completion of applicable IT security SOP s. Periodically reviews, modifies corporate IT Security standards and procedures as required by changes in technologies, business activities, and regulations. Work with IT leadership to develop strategies and plans to enforce security requirements and address identified risks. Is a subject matter expert around IT Security and provides technical guidance on any IT projects. Develops and maintains detailed knowledge of security products, tools, regulations, and best practices. Reports to IT management concerning risk, vulnerabilities, and other security exposures, including misuse of information assets and noncompliance. Plays a consultative role in application development and lead security role in acquisition/merger projects to assess security requirements and controls and to ensure that security controls are implemented as planned. Collaborates on critical IT projects to ensure that IT security issues are addressed throughout the project life cycle. Fully understand security policies, standards, processes, and procedures, and supports service-level agreements (SLAs) to ensure that security controls are managed and maintained. Researches, evaluates, and recommends IT and information-security-related hardware and software, including developing business cases for security investments. Assumes highly visible technical project management role. Flexibility for occasional on call availability as business need dictates given 24/7 business operation Manages relationships with key IT Security product and service vendors. Provide engineering expertise in the delivery of assigned security products, such as all applicable security tools. Works closely with Security architecture in the overall design and implementation of security solutions. May be called upon to represent security architecture if one is not assigned to an IT initiative. Develop processes to migrate to IT Operations any security products where possible. When appropriate represents IT Security to Senior IT Management and customers. Technical Competency: In-depth knowledge and understanding of information risk concepts and principles, as a means of relate.