Senior Cyber Security Engineer

Overview OSI Systems, Inc. is a vertically integrated designer and manufacturer of specialized electronic systems and components for critical applications. We sell our products and provide related services in diversified markets, including homeland security, healthcare, defense, and aerospace. As a global company, we are dedicated to creating and developing solutions for our customers and the people they serve to lead the way to a safer and healthier world. OSI Systems, Inc. is seeking a Sr. Cyber Security Engineer. This position will involve in security engineering projects along with day-to-day security operations tasks to achieve Information Security long term goals.

Responsibilities Designing enterprise scale Cyber Security Solutions in alignment with Information Security Strategy.

• Engineering, implementation, and monitoring of security control for the protection of cloud infrastructure, networks, systems, and data, to help mitigate security risks, and to automate repeatable tasks. Work with the IT Infrastructure and Applications teams to implement these controls.
• Identify and define security requirements for Business and IT Projects. Analyze, report and assist in management of security-related risks, including reporting on outcomes and proposing further security improvements.
• Conduct risk assessment of Cloud solutions.
• Assess security controls of Hybrid cloud computing (on-premises and cloud) environment and make recommendations to mitigate risk.
• Evaluate security aspects of network, system, application, cloud infrastructure and other IT architecture designs and make recommendations as needed.
• Supporting Incident Response processes, working with Security Operations in triaging security events and incidents.
• Perform service management for security devices, including configuration and maintenance.
• Work with third-party security service providers to ensure service delivery.
• Prepare and document standard operating procedures and policies.

Qualifications 7+ years of work experience in information technology combined with security experience.

• 4+ years of work experience in network firewall, Intrusion Prevention, Secure Web Gateway, Microsoft Defender Security Suite, etc.
• 2+ years of work experience in cloud security (AWS and Azure).
• Hands-on experience in network security, cloud security, endpoint security, identity and access management, vulnerability management, configuration management, media protection, contingency planning, log management, and data protection methods
• Thorough understanding of the security principles, techniques, and protocols, including defense-in-depth, network segmentation, privileged access management, common application security flaws, and commonly known ports.
• Capability to clearly communicate information security concepts and risks
• Problem solving skills and ability to work under pressure
• Good verbal and written communication skills in English
• Ability to work as part of a team and independently
• Bachelor’s degree in Computer Science, Information Security or related field
• Off-hours support may be needed.

Preferred

• Professional information security-related certifications such as CISSP, GSEC, SANS courses
• Familiarity with standards and frameworks such as NIST 800-53, NIST 800-171, ISO 27001/27002, PCI-DSS
• Previous experience working in an enterprise environment
• Willingness to accommodate other time zones