Sr. Security Engineer/Firewall Administrator - Latitude Information Security West Chester, PA, USA Bookmark Share Print 644 0 0

Listing Description

Latitude Information Security (“Latitude”) is an information security consulting firm headquartered in the Greater Philadelphia area. We are a team of motivated professionals, committed to protecting our clients’ most valuable security assets. Our mission is to onboard talented and passionate individuals to help us in providing high-quality information security services to the healthcare industry. We are proud to employ a diverse range of talent in an environment that fosters continuous improvement and success.

We are seeking a mid-level Sr. Security Engineer/Firewall Administrator that is self-motivated and capable of applying their knowledge, experience, and potential to a variety of applications across the entire Information Security spectrum. Our continued success relies on the onboarding of team members that operate with a high degree of integrity and quality in everything they do. Our clients deserve it – we demand it. If you maintain an extreme sense of personal responsibility, are eager for an opportunity to advance your career, and meet the qualifications listed below, then we’d welcome an opportunity to review your resume and cover letter.

The candidate that fills this role will be a senior member of the team and generally tasked with actively advancing the security posture of a large healthcare client. Assignments may include configuring firewall rules, network design/implementation, leading the implementation of an Anti-Virus solution alongside a Project Manager, monitoring IT/Security tools (i.e., SIEM, IDS/IPS, etc.), interpreting and prioritizing Vulnerability Scan results, assisting with security incident response efforts, designing and rolling out security controls and operationalizing them into effective practices, working in tandem with stakeholders across the client’s enterprise, conducting vendor risk assessments, and much (...much) more. While other team members will surround and support you, this role demands a level of experience that allows you to lead the direction of a security program and drive technical and operational practices.

This full-time position, with an immediate start date, requires traveling to the assigned client 4 days a week in the Valhalla, NY area and working from home 1 day a week; reasonable travel expenses are reimbursed. 

General Qualifications:

- 3-5 Years of Information Security experience

- Bachelor's Degree or higher

- Very strong verbal, written, and listening communications skills

- Ability to confidently present to an executive audience

- Ability to work independently on assigned efforts

- Ability to achieve (ISC)2 CISSP certification within 1 year of the hire date (if not already certified)

Required Knowledge and Experience:

- Hands-on experience with firewall management, networking design and architecture, IAM, vulnerability and industry security technologies such as endpoint protection and network/device monitoring.

- Strong technical knowledge of IT systems and information security fundamentals

- Awareness of application security concepts, penetration testing techniques, and incident forensics

Desired Experience:

- Firewall configuration experience (Cisco Firepower preferred)

- Cisco products, including; Stealthwatch, ISE, AnyConnect, Firepower, Umbrella

- VMware NSX

- Email filtering

- Cloud security controls

- Network segmentation

- Identity/Access Management

- SolarWinds SIEM

- Varonis

- Carbon BlackImplement and tune security tools and solutions across a client’s enterprise

Lead/participate in security incident investigations

Hands-on use of with Varonis, SIEM tools, endpoint and network-based analytics

Actively tune and configure tools to reduce false positives, increase efficacy

Guide configuration of policy based packet and web rules/ guardrails. Review Cerner QA thereof.

Lead security initiatives/light Project Management

Firewall configuration and ACL management

Review current network design and implement improvements

Use security tools to investigate potential security incidents and intrusions

Conduct routine vulnerability scanning and endpoint monitoring across the client’s network and triage findings

Establish mechanisms for fine-tuning a client’s security technologies and automating alerts

Draft and update documentation, including policies, procedures, baselines, guidelines, etc.

Perform additional duties as assigned