Security Engineer

Security Engineer

Vacancy expired!

The Cyber Security Engineering and Design Team within Security Department at Consumers Energy provides reliable and secure services to internal clients across multiple locations within the Consumers Energy enterprise. The team has a very strong focus on system confidentiality, integrity, and availability through the design, engineering, and implementation of highly secure solutions. Additionally, the team is tasked with creating and managing detailed documentation and procedures to ensure consistency between security engineering and operations.

Job Description:
The

Security Engineer is primarily responsible for planning and building effective computing solutions to increase the security of Consumers Energy corporate systems by direct and indirect interaction with business partners and implementation of projects and/or Enhancements.

• The Security Engineer will consult on the design, development, integration, and analysis of platforms, working with systems, hardware, software, and variety of technical and non-technical teams to deliver adequate solutions to mitigate risks while meeting the business objectives. Additionally, the Engineer will work with client-facing tasks to develop and integrate security Automation and Orchestration.

Key responsibilities include:

• Formal documentation of all department specific work products
• Develop and integrate Security Automation and Orchestration
• Works closely with Business and IT Partners to develop and integrate custom A&O playbooks, use cases, and workflow integrations across the Environments
• Work on developing highly extensible, scalable, and secure Cloud-based A&O services that can be adopted and integrated in a wide range of Cybersecurity use cases
• Review Automation Opportunities to further provision Access with Identity Management
• Assisting with implementing SaaS solutions as it relations to introducing and connecting new automation tools to our network and systems (SAP, ServiceNow, Azure DevOps)
• Assist with Roadmaps for Security Automation Capabilities

K

nowledge/Skills/Abilities:

• Understanding and Familiarity with Agile SDLC Methodology
• Understand the value of process improvement and Automation to achieve improvements
• Be up to date on Security Automation Techniques and Viable solutions
• Familiarity with IT and Security Architecture
• Understanding of a Dev/Sec/Ops approach in Application delivery

Requirements:

• 5+ years’ experience in cyber security network and/or security engineering, or other closely related discipline is required with hands on experience with at least 3 of the following technologies:
  • Firewalls
  • Network Architecture Design
  • Cloud Technology AWS/Azure
  • Security Automation Toolsets
• Bachelor’s degree from an accredited college or university in engineering, computer science, related field, or equivalent combination of education & experience.

The following skills and experience will set you apart from others:

• Masters or other advanced degree, ideally in an IT or Business area
• Energy industry background that includes a working knowledge of effectively mapping technology to business challenges
• CISSP, GISP, GPEN, GWAPT, or related SANS certifications are highly preferred
• Proven hands-on experience with data gathering, system, and process automation/orchestration via XML, Python, PowerShell, Ruby, or other scripting languages which may or may not leverage platform APIs
• Experience with AWS/Azure security frameworks.
• General familiarity with industry specific security standards such as SANS Top 20, PCI DSS, HIPAA, NERC/CIP, NIST 800 series
• Proven oral, written, and presentation skills with various audiences from technical, business customer, and management, including the ability to drive technical change and constructively influence peers and leadership
• Self-motivated, results oriented, with demonstrated leadership and problem-solving abilities
• Experience documenting, presenting, and communicating technical solution designs and operating procedures via Microsoft productivity suite; Lync, Visio, Word, PowerPoint, and Excel

Overview: The IT Technical Job Family is utilized in Information Technology. Typically, employees in this job family are required to design or maintain technology systems, to utilize various computer software programs, and to design, develop and/or provide advice and counsel on the operation of equipment, processes, and procedures. They are responsible for ensuring adherence to laws and regulations applicable to Company employees. This job family includes Application Development, Infrastructure, Information Security, and Architecture.

Nature of Work: Duties can include network management, software development and database administration. May also provide technical support to a business or an organization's employees and train non-technical workers on the business' information systems. May design systems and assess the effectiveness of technology resources already in use or new systems that are being implemented. Determines the practicality of changes and modification of systems. Works with external partners, including consultants, agencies and vendors, to arrive at the most appropriate system or integration of multiple systems. With information technology constantly changing, must stay up-to-date on emerging technologies and the potential effectiveness of these advancements in their current system.

Essential Functions: Works closely with department managers and users to define and analyze business and operational problems, process improvement opportunities and requirements; analyzes operational and business mandates and legal requirements; identifies and analyzes complex, ambiguous and/or conflicting business process issues; advises department managers on applications development, enhancement and maintenance issues; explains technology and process options and assists managers in analysis and decision making; analyzes management information needs and recommends data and reporting processes; coordinates the development of department priorities and works within IT to align initiatives to these priorities; facilitates user meetings and joint development sessions. Develops and refines business models and relationship diagrams; evaluates methods of improving efficiency and cost effectiveness of business, technical and operational processes; works with users to reengineer work processes; analyzes functional business requirements and translates user expectations into detailed business requirements, specifications and success criteria; works with Information Systems to develop conceptual proposals for business process automation initiatives; recommends work process and/or operational changes to complement system functionalities; serves as an advocate for department needs with IT; stays abreast of developments in departmental processes to anticipate emerging technology needs. Participates in the development of statements of work for RFPs/RFIs; participates in evaluating vendor applications and solutions; coordinates department review of vendor deliverables for accuracy and completeness, ensuring that department needs and requirements have been met. Develops significant application/hardware solutions to problems and addresses change request issues that require assignment of resources. Analyzes and troubleshoots complex and sometimes urgent applications problems and errors; takes action or communicates solutions to problems; answers technical questions and provides guidance to users on system functionalities and methods for correcting problems. Develops training materials and handouts; conducts user applications training classes and one-on-one training sessions; develops and maintains user and system documentation. Designs and generates custom reports to meet user needs; uses reporting tools to extract user-required data. Plans and coordinates the deployment of new technologies for client solutions; coordinates user acceptance testing and the resolution of problems identified. Regular attendance is expected.

Hours and Travel: Meet travel requirements of the position. Work a flexible schedule, which may include evenings, weekends, holidays and overtime.

Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to sit, stand, walk, stoop, kneel, crouch, crawl, and use hands to finger, handle, or feel objects. The employee frequently is required to talk or hear. The employee must lift and move up to twenty pounds. Specific vision abilities required by this job include close vision, color vision, depth perception, and the ability to adjust focus. The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. The noise level in the work environment is usually moderate.