[Remote] Security Engineer I

Note: The job is a remote job and is open to candidates in USA. Nordic Global is seeking a Security Engineer I to provide daily operational information security support to their clients' enterprises. The role involves supporting cybersecurity initiatives, conducting investigations of security breaches, and making recommendations to address security risks.

Responsibilities

• Operate, maintain, and troubleshoot cybersecurity technologies
• Recognize cybersecurity risks and make appropriate recommendations for addressing them
• Analyze and recommend secure technical solutions for network/system connections to individuals, contractors, vendors, and business partners
• Implement, support, and evaluate cybersecurity-focused tools and services
• Administer and analyze data from network security devices and services to prevent security threats and reduce risk
• Provide periodic security reporting
• Work closely with IT teams and third-party vendors to identify and provide secure IT solutions
• Assist in developing and implementing security policies and procedures involving network security architecture, network access and monitoring
• Adhere to all policies defined by management related to change control, security, and separation of duties
• Perform system implementations and significant changes to existing systems to ensure that compliance requirements and critical risks are adequately addressed
• Remain current with cybersecurity trends and threats. Identify those that pose risk to systems, develop, and implement appropriate responses
• Develop change management requests related to security technologies
• Other duties as assigned

Skills

• Generally requires a Bachelor's degree and 3 years of related experience or 6 years of related experience and no degree
• 3 years of combined relevant work experience in cybersecurity, information technology and/or information security operations
• Experience with cybersecurity toolsets such as: CyberArk, Securelink, Crowdstrike, Nessus, Palo Alto, Varonis, and Windows Defender suite
• Skill in applying and incorporating information technologies into proposed solutions
• Skill in designing the integration of hardware and software solutions
• Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes
• Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)
• Basic/fundamental knowledge of computer networking concepts and protocols, and network security methodologies
• Basic/fundamental knowledge of risk management processes (e.g., methods for assessing and mitigating risk)
• Basic/fundamental knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy
• Basic/fundamental knowledge of cybersecurity and privacy principles
• Basic/fundamental knowledge of cyber threats and vulnerabilities
• Basic/fundamental knowledge of specific operational impacts of cybersecurity lapses
• Basic/fundamental knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)
• Basic/fundamental knowledge of security system design tools, methods, and techniques
• Basic/fundamental knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations
• Basic/fundamental knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth)
• Basic/fundamental knowledge of network systems management principles, models, methods (e.g., end-to end systems performance monitoring), and tools
• Basic/fundamental knowledge of cybersecurity-enabled software products
• Basic/fundamental knowledge of multi-level security systems and cross domain solutions
• Basic/fundamental knowledge of program protection planning (e.g., information technology (IT) supply chain security/risk management policies, anti-tampering techniques, and requirements)
• Basic/fundamental knowledge of configuration management techniques
• Basic/fundamental knowledge of the enterprise information technology (IT) architectural concepts and patterns (e.g., baseline, validated design, and target architectures.)
• Basic/fundamental knowledge of integrating an organization's goals and objectives into the architecture
• Basic/fundamental knowledge in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes
• Basic/fundamental knowledge of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection)
• Basic/fundamental knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc
• Functional understanding of Microsoft Azure AD/Entra, Intune, and 365 operation with specific regard to cybersecurity considerations
• Basic/fundamental understanding of KQL and experience writing queries
• CompTIA Security+
• CompTIA Network+
• Vmware
• CyberArk
• CISSP
• CEH
• SANS GPEN
• GCIH

Company Overview

Company H1B Sponsorship