Security Engineer

GLOTECH, Inc., founded in 1995, is a privately and minority-owned company serving military, federal and commercial clients.  We are a successful Information Technology firm with a large staff currently providing superior information technology and advanced engineering services around the world. Our success is built on attracting and retaining quality staff through a highly competitive benefits package with a special focus on continuing career development and corporate financial support. We also maintain a collegial working environment and offer our staff opportunities to improve and enhance their skills.

GLOTECH is committed to a comprehensive employee benefits program that helps our employees stay healthy, feel secure and maintain a work/life balance. We provide medical dental and vision care, disability insurance (short and long term), Life & AD&D Insurance, Flexible Spending Accounts (Healthcare, Dependent Care and Commuter Transportation and Parking Reimbursement), and Employee Assistance Programs. Additionally, we provide Annual Leave, Sick Leave, Holiday Pay, Educational Assistance, Certification /Training Reimbursement, and a 401(k)-retirement savings contribution plan (with employer match).

This is a talent pipeline opening.  We are building a network of qualified talent for general consideration of future full time or temporary Security Engineer job openings. 

GLOTECH is seeking a Security Engineer to support the corporate office of United Parks & Resorts operation in Orlando, Florida. 

The Security Engineer is responsible for the administration of key security program functions within the enterprise including firewall management, McAfee configuration, intrusion detection/prevention, Internet content filtering, end point protection, secure web gateway, vulnerability management tools, File Integrity Monitoring (FIM), Mobile Device Management (MDM), and Security Information & Event Management (SIEM).

• Maintain day to day operational health and integrity of IT security systems; including the coordination, assessment, and implementation of security changes.
• Conduct collaborative troubleshooting and problem solving steps that emphasize root-cause analysis across a dynamic, multivendor enterprise.
• Architect and engineer new IT security solutions and services to continually mature the risk posture of the organization.
• Perform Risk Assessments for proposed new technologies, infrastructure architecture changes, third party applications, vendor solutions.
• Work with development teams to advocate secure coding practices, implement code management tools, and promote developing and deploying code updates in a secure manner.
• Ensure proper visibility into system and network events across the enterprise while working with an external MSSP and other security partners.
• Respond to security incidents, conduct incident investigations, lead incident recovery efforts, and generate incident reports.
• Participate in formal hardware, software and project assessments to validate secure deployment and PCI-DSS, SOX compliance.
• Participate in the preparation for PCI and SOX assessments as necessary.

• Possess a strong understanding of Information Security concepts and defense in depth approaches.
• Must have experience managing firewalls, IPS/IDS, Vulnerability Assessment and remediation, Risk Analysis and mitigation, cryptography, File Integrity Monitoring (FIM), MDM, Secure Web Gateway, and End Point Protection (Windows, Active Directory, SQL Server, IIS, .NET, Cisco and Checkpoint network equipment).
• Excellent problem solving skills, strong written and verbal communication skills and must be able to explain technical issues to a non-technical audience.
• Must be self-motivated and able to work in a fast-faced environment with minimal supervision.
• Must be a team player and excel in a team-oriented, collaborative environment.
• Up to 10% travel.
  
• Hybrid schedule, with availability to work onsite in Orlando, FL as needed

Preferred Skills

• Familiarity with security best practices, including NIST, CIS, and other common industry approaches.
• Familiarity with management of Logrythym SIEM platform, incident response planning, incident investigations, and the MITRE ATT&CK killchain model.
• Experience with cloud-based solutions, services, and technologies; including Microsoft Azure, Amazon AWS, etc. – in hybrid IaaS and PaaS deployments.
• Experience with Microsoft 365 for business, EOP, Defender ATP, MFA, DLP, information protection, encryption, security center, etc.
• Experience with McAfee configuration, monitoring and troubleshooting.
• BS in MIS, Computer Science, or equivalent experience.
• CISSP (Certified Information Systems Security Professional) certification preferred or equivalent work experience combined with conceptual knowledge.
• Minimum 5 years of experience in an enterprise network environment.
• Knowledge of PCI DSS.

GLOTECH, Inc. is an Equal Opportunity/Affirmative Action Employer - Minorities/Females/Protected Veterans/Individuals with Disabilities.