Network Security Engineer

Job Summary:

The Network Security Engineer is responsible for ensuring the BDO's network and information systems are protected from external and internal threats. In this role, the Network Security Engineer is charged with engineering solutions, analyzing network exposure, identifying remediation techniques and strategies, and building policies and procedures.

Job Duties:

• Analyzes and evaluates security and network detection systems for systems exposure or mis-configuration against BDO security standards
• Analyzes BDO's technical estate during firm expansions to ensure proper asset attribution and protection
• Analyzes BDO's technical estate and any divergence from firm standards that expose the firm to cybersecurity risks and recommends remediations to reduce that risk.
• Recommends and implements changes to enhance network and open systems security for BDO
• Protects network resources (LAN/WAN, telecommunications, and voice) against unauthorized access, modification, or destruction
• Manages and implements secure remote access solutions for BDO
• Maintains and upgrades all network security equipment as needed
• Configures threat deception technologies to identify new prevention and detection standards and rules
• Performs day-to-day monitoring and management of intrusion detection and logging systems
• Collaborates with IT partners to create and execute the Firm's technical strategy
• Partners with IT professionals to evaluate and recommend security patches or configuration changes
• Performs intrusion testing on corporate network, both external and internal, and reports findings back to upper management
• Provides assistance with establishing standards for hardware and software where there are implications to security
• Coordinates with other departments inside BDO (such as Legal and Human Resources) to create and enforce policies and procedures related to information security
• Reports security assessment metrics to upper management on a regular basis
• Collaborates with internal departments at BDO to communicate BDO's security program to customers and prospects
• Adheres to BDO and department policies and procedures
• Other duties as required

Supervisory Responsibilities:

• N/A

Qualifications, Knowledge, Skills, and Abilities:

Education:

• High school diploma/GED, required
• Bachelor's degree, preferred

Experience:

• Five (5) years of experience providing IT systems security support, required

License/Certifications:

• CISSP certification, preferred

Software:

• Demonstrated knowledge of one (1) or more of the following, preferred:
  
  
  
  • Packet capture and analysis - Wireshark or similar
  • Vulnerability Management Systems -
  • Cybersecurity Asset Management systems (Xpanse, Armis, Qualys)
  • Cybersecurity Deception tools
  • Intrusion detection/prevention and threat management
  • Basic functionality of Windows and Linux servers, workstations, and networks
  • Understanding of virus and malware detection & removal
  • Scripting experience (python, powershell)
  
  
• Experience with networking technologies related to security such as Cisco IOS, Cisco firewalls, Palo Alto, preferred
• Experience with Web Application Firewalls, preferred
• Experience with DNS and Domain management, preferred
• Experience with DDoS Protection technology, preferred
• Experience with VPN and remote access technology (client and site to site VPN) experience, preferred
• Experience with web proxy solutions, preferred

Language:

• N/A

Other Knowledge, Skills & Abilities:

• Strong verbal and written communication skills
• Excellent interpersonal and customer relationship skills
• Ability to work in a deadline-driven environment while handling multiple complex projects/tasks simultaneously with a focus on details
• Ability to successfully multi-task while working independently or within a group environment
• Basic understanding of security breach detection and mitigation
• Understanding of asset management related to domain names and SSL certificates
• Familiarity with various regulatory policies (Sarbanes-Oxley, HIPAA, GLBA and other government-imposed security imperatives) as they relate to data security and IT policies/procedures
• Basic awareness of PCI-DSS, ISO 2700x, FISMA, and other industry recommended security programs
• Ability to rely on extensive experience and judgment to plan and accomplish goals
• Ability to work well under pressure while dealing with unexpected problems in a professional manner
• Ability to communicate and interact with all levels of employees and management
• Ability to interact and build consensus among people
• Ability to work after standard business hours and travel