Professional Search Group Looking for Lead Information Security Engineer at Los Angeles, CA Full Time

Professional Search Group is actively working with an progressive company that is looking for an Lead Information Security Engineer . This is an awesome direct hire role local to Los Angeles!

*Company cannot sponsor visas. (No contract or C2C.)

Do you want to make a major impact in technology?

Take immense pride in the company you work for as you sustain a borderless internet!

Join this team and you will have great compensation, amazing benefits, large 20% bonus, authentic company culture, with many career growth opportunities!
Lead Information Security Engineer duties require the consistent exercise of independent judgment and discretion, ability to work with limited, if any, supervision regarding technical issues and the ability to coordinate technical efforts of a team to meet security project goals.

Key Responsibilities & Duties:

• Provide a leadership role across Information Security and may supervise or lead the activities of others while building relationships and team morale.
• Lead and design enterprise security programs, such as Network Security Monitoring, Incident Response Case Management, red-team exercises, and establish and maintain security frameworks, audit (or oversee 3rd party audits) of organizational structures.
• Establishing testing protocols to identify and document potential security vulnerabilities of IT systems.
• Solving complex problems involving enterprise security risks without supervision.
• Assume the role of a key communications gateway to SaNE while collaborating on security aspects of joint projects with E&IT teams.
• Designing, deploying, and administering enterprise email authentication and encryption solutions – such as PGP or S/MIME certificates.
• Establish and implement project plans and schedules for conducting security vulnerability assessments of company enterprise systems.
• Oversee or lead and help manage joint efforts by E&IT engineers to meet security project goals.
• Managing internal and external, in-house or 3rd party, penetration testing of corporate systems.
• Respond to (or if delegate, lead) the processes surrounding security events and incidents on a 24/7 basis if necessary.
• Collect, analyze, and archive electronic and written records, digital media, notes, and other evidence. 
• Document the analysis of results and assist in providing security advisories for all users. 
• Identify and promote ways the company can learn from security events and avoid repeat occurrences.
• Developing and authoring information security policies and defining procedures to implement industry best practices.
• Lead projects to identify security issues proactively through analysis of network traffic, software and hardware testing, log review and consultation with users.
• Conduct or oversee forensic examinations of digital records, logs and other data.
• Guidance and oversight of various corporate security systems.
• Work with E&IT staff to analyze security related events to assist with escalation decisions.
• Oversee and coordinate security monitoring and incident response for the company production systems.
• Coordinate with vendors and external security teams to address security issues for external IT services and systems.
• Work with the E&IT Senior leadership team to construct and adhere to Information Security budgets.
• Maintain a very high level of ethics and integrity.
• Experience in public speaking and presentations to executives and community.
• Other duties as assigned or requested.

Required Knowledge, Skills, and Abilities (KSAs):

• Subject Matter Expertise in all of the following areas:
• Identity Management
  • Authentication and Authorization
  • User Behavior Analytics
• Data Security
  • OS Security Hardening (Windows, Linux, MacOS, iOS)
  • Knowledge (or the capacity to quickly gain knowledge) of encryption theory and practice (e.g. TLS, HMAC, RSA, AES, PKI)
• Network Security Monitoring
  • Log Management (SEIM)
  • IDS/IPS
  • Packet Capture Dissection
• Web Application Security
  • Attack Techniques
  • Secure Coding Practices
  • Common Vulnerabilities and Mitigation
• Vulnerability Detection and Management
  • Manual Attack / Defense Techniques
  • Automated Scanning
  • Passive Network Detection
• Threat Modeling and Security Controls
  • DREAD
  • STRIDE
  • NIST CSF
• Data Security/Privacy Practices
  • Anonymization methods
  • Tokenization methods
  • Masking methods

Education and Experience Requirements:

• Bachelor’s Degree required, Study in Computer Science, Information Technology, or a related field desired.
• Minimum three (3) years of general IT experience.
• Minimum of eight (8) years of Information Security experience.
• Professional certifications in Information Security, such as SANS GIAC certs or similar.

Language

• Fluency, both written and spoken, in English is required.
• The company is a global organization that values diversity; preference will be given to candidates with demonstrated skills in additional languages besides English.