Senior Cyber Security Engineer

The Senior Cyber Security Engineer is responsible for designing, coding/configuring, and administering Cyber Security systems. This person is expected to champion processes and technology as a subject matter expert in various technical areas and to demonstrate this ability at a senior level. The position works closely with teams in other Cyber Security disciplines, infrastructure, and operations areas to help provide superior protection to Retail Services information assets. This role serves as a mentor and is be expected to develop junior staff and engineers in areas of subject matter expertise.

Essential Job Functions:

• Lead the design and implementation of vital IT projects aligned with the organizations long-term security strategy. Identify and develop new processes to address gaps. Manage ambiguity and deliver quality results with minimal supervision. Escalate issues when needed and collaborate with leadership to resolve challenges. Build consensus and foster collaboration for successful outcomes. - (30%)
• Understand Cyber Security tools and technologies. Lead documentation efforts, including run books, project updates, and technical requirements. Develop KPIs and mature reporting structures through data analysis using Excel, database queries, etc. Create actionable metrics and produce tailored presentations using Microsoft PowerPoint, Visio, or similar tools. - (30%)
• Work collaboratively in a dynamic, fast-paced environment as an Cyber Security expert, mentoring junior staff. Continuously learn and share new technical developments. Support Cyber security strategy and act as a change agent, identifying change drivers and partnering with leadership. Collaborate with peers on key projects and issues, utilizing strong interpersonal and negotiation. - (20%)
• Maintain confidentiality and professionalism while proactively identifying and solving issues. Resolve conflicts and simplify complex topics into understandable terms. Act as an enabling partner by offering alternatives or support when declining requests. Recognized by leadership and peers as credible, trustworthy, and respectful. - (20%)

Minimum Qualifications:

• Bachelor s Degree in Computer Science, Networking or Information Technology
• Security +, Network+, CISSP, SSCP, CCSP
• 5+ years of experience in Cyber Security or Infrastructure.

Preferred Qualifications:

• Intermediate to expert level knowledge of IT tools and practices including, but not limited to: Threat Intelligence, Networking, LDAP Directories, Vulnerability/Patch Management, Change Management, Incident Management, Server and Desktop Management, Mainframe Technologies, Encryption and Key Management, Cloud Architecture and Computing, Software Application General Computing Controls, Business Continuity/Disaster Recovery, Software Development Lifecycle, Access Management, Scripting/Automation, Programming/Code Development, and Cyber Security Tools (Security Incident Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), Data Loss Prevention (DLP) , Intrusion Detection System (IDS), Intrusion Prevention System (IPS), End User Behavioral Analytics (EUBA), Web Application Firewall (WAF), Network Access Control (NAC), Privileged Access Management (PAM), Endpoint Detection Response (EDR). Broad range of skills with different technical platforms (firewalls, servers, workstations, networks, storage, security, Internet and cloud (SaaS / IaaS / PaaS) technologies).
• Working understanding of NIST security standards, PCI - DSS and SOX controls.

Skills:

• Cyber Security Standards
• Network Access Control (NAC)
• NIST Cybersecurity Framework (CSF)
• PCI DSS Compliance
• Privileged Access Management (PAM)
• Sarbanes Oxley (SOX) Control
• Security Information and Event Management (SIEM)
• Server Management
• Web Application Firewall (WAF)
• Cyber Threat Intelligence
• Scripting
• Code Development

Reports To : Manager and above

Direct Reports : 0

Work Environment:

• Normal office environment, hybrid.