Cyber Security Engineer II

This position is responsible for identifying weaknesses in current information security solutions to protect the college's computer infrastructure, networks, and data against cyber-attacks and internal threats. The Cyber Security Engineer II will work closely with all ITS divisions to assist the Cyber Security Engineer I with day-to-day operational security issues while also mentoring Cyber Security Engineer I to provide guidance for complex security solutions and day-to-day operations.

To perform this job successfully, an individual must be able to perform the essential job functions satisfactorily.  Reasonable accommodations may be made to enable individuals with disabilities to perform the primary job functions herein described.    

*Assists Cyber Security III with short-term and long-term security solutions

 

*Mentors Cyber Security Engineer I to provide guidance for complex security solutions and day-to-day operations

 

*Serves as primary point-of-contact in reviewing threats and vulnerabilities and designing a mitigation strategy

 

*Researches industry best practices to ensure appropriate products and standards are implemented to protect the college from vulnerabilities and unauthorized access

 

*Assists CSE III to confirm threat and vulnerability incidents are reported, documented, and resolved in accordance with established governance policies and procedures

*Responsible for monitoring of the College's security prevention and detection solutions, both internal systems and external, third-party services that provides protection for the college's network infrastructure and systems

 

Serves a secondary point-of-contact in emergency situations for information security threats. Responses are required during and after normal business hours to identify, assess and mitigate critical security issues

 

Assists CSE III with briefing materials to present to ITS Department leadership concerning vulnerabilities, security exposures, risks and impact of each to the institution

 

Develops and monitors processes for ensuring authorized access to college resources including permission violations and approving the revoking of permissions as needed

 

Participates in departmental risk assessments, security reporting and incident management as established by state guidelines and internal policies

Helps transform the overall cybersecurity culture of the college to meet industry standard

Knowledge, Skills, and Abilities 

Demonstrated experience in Internet and network security products and platforms, including intrusion detection, intrusion prevention, incident response, vulnerability assessments, and penetration testing

 

General understanding of industry standards and requirements for information security management, state and federal statutes, and third-party security assessments

 

Ability to work effectively with college leaders and IT engineering, operations, and support staff

 

Demonstrated knowledge of information security alerts, threat trends, intrusion analysis, malware, anomalous behavior, forensic research, and incident response protocols

 

Strong analytical, project management, and team-oriented interpersonal skills

 

Proven ability to work under pressure in emergencies and communicate security-related concepts to technical and non-technical staff

Minimum Requirements  

Associate degree with four years experience in cyber-security or an equivalent combination of education and experience 

 

Ability to work nights and weeks as needed to resolve security related issues

Preferences 

Security+, CEH or equivalent certification

 

Experience with firewalls, ACLs, and endpoint security

 

Experience with one or more of the following: Python, C#, PHP, Drupal, SQL, Java

 

Experience with one or more of the following: Cloud application platforms, Microsoft 365, SharePoint, IIS

One or more years experience in higher education

#IDHP