Security Engineer (930867) at Equus in Louisville, KY

Company Description

Creating Opportunities. Changing Lives. Equus Workforce Solutions® is the most comprehensive provider of workforce development services in North America, assisting over a million job seekers and thousands of employers annually. We are drivers and collaborators for workforce systems change, including quickly adapting to changes in legislation, job seeker demographics and market and industry changes. We work every day to change lives, advance economies and help communities thrive. If this is your passion, join us. Start here. Let us take you where you want to go.

Job Description

The organization's Information Technology ecosystem relies on systems that support Operations. The IT Security Engineer is essential for protecting these systems, processes, and computing resources. This role offers technical leadership in various security areas, including IT systems, networks, and applications, and may design, implement, and test security solutions. The engineer works with peers and leaders to guide security strategies and architecture, delivering initiatives aligned with IT goals. Key responsibilities and attributes include:

Strategy, Policy, and Compliance

• Contributing to the security strategy to support the organization's goals and objectives.’
• Creating and enforcing security policies and procedures to protect the organization's assets, data, and systems.
• Identifying and assessing security risks and then implementing measures to mitigate these risks.
• Promoting a culture of security awareness among employees and stakeholders.
• Ensuring that the organization complies with relevant security and privacy regulations and standards.

Incident Response & Governance

• Lead contributor in the response to security incidents and breaches, including investigating and documenting incidents, and coordinating with law enforcement or other relevant entities when necessary.
• Executing and maintaining a well-defined Security Incident Response Plan (SIRP) to guide the organization's response to security incidents.

Technical Solutions & Practices

• Evaluating, implementing, and managing security tools and technologies, such as firewalls, intrusion detection systems, and antivirus software.
• Defining and enforcing security governance structures within the organization.
• Providing security training and awareness programs for employees to enhance their understanding of security best practices.
• Monitoring for and addressing vulnerabilities in the organization's systems and applications.
• Developing and maintaining security metrics to track the effectiveness of security measures and report to management.
• Staying up to date with the latest threats and vulnerabilities by monitoring threat intelligence sources.
• Security analysis: This is the ability to understand both security and the specific business with its unique problems, and to use security tools strategically to monitor, identify, and resolve security issues and risks.
• Penetration testing: This is the ability to probe information systems for vulnerabilities and exploits that attackers may find, and to recommend ways to mitigate them.
• Secure application development, or DevSecOps: This is the ability to incorporate security into the software development and operations process, and to ensure that the applications are built and deployed securely and efficiently.
• Certification in security-related fields, such as CISSP, CISM, CISA, CEH
• Scripting and Automation: Proficiency in scripting languages (e.g., Python, PowerShell) and automation tools to manage cloud resources Proven experience (5 years) as an Accountant or similar role.
• Networking Understanding of cloud networking concepts, including virtual networks, subnets, and security groups.
• Security Knowledge: Strong knowledge of cloud security best practices and tools for securing cloud environments.
• Collaboration: Effective communication and teamwork skills to collaborate with various teams and stakeholders.
• Problem Solving: Strong troubleshooting skills to diagnose and resolve issues in cloud environments.
• Strong analytical and problem-solving skills.
• Attention to detail and accuracy.
• Excellent communication and interpersonal skills.
• Ability to work independently and collaboratively.

Qualifications

Preferred Experience and Competencies

• IaC (Infrastructure as Code): Familiarity with IaC tools like Terraform, CloudFormation, or Ansible.
• Cloud Service Proficiency: In-depth knowledge of one or more cloud platforms, such as AWS, Microsoft Azure, Google Cloud, or others.
• Familiarity with industry-specific infrastructure standards.
• Exposure to global business structures preferred.

Additional Information

All your information will be kept confidential according to EEO guidelines.

Equus Workforce Solutions is a leading provider of workforce development services in North America. With a dedicated and passionate team, Equus puts the industry’s best practices to work by focusing on the development, design, and delivery of demand-driven workforce solutions.

When you join Equus, you can expect extensive learning opportunities and networking programs. But most of all you can expect to make a lasting impact on the lives of others.

At Equus we are strengthened by diversity. We are committed to providing a work environment in which everyone is included, treated fairly and with respect. Equus Workforce Solutions is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, gender, age, pregnancy, sexual orientation, gender identity, ancestry, religion, national origin, veteran status, physical or mental disability, or reprisal or any other characteristic protected under state, federal, or local law.