Security Operations Engineer

Kodiak Security Operations Engineer

The Information Security Engineer is responsible for designing, implementing, and maintaining security measures within an organization. They work with the MSSP to monitor networks, investigate incidents, and collaborate with IT teams to ensure robust security practices. The Information Security Engineer contributes to technology projects, creates and updates security standards and policies. The Information Security Engineer assesses the information security program in relation to applications and systems, identifying strengths and weaknesses and providing feedback to technology teams to enhance the firm’s overall security posture.

Responsibilities:

• Works with the MSSPs, Security, IT and other business units to manage day-to-day security activities, monitor alerts, and respond to incidents.
• Works with the MSSP’s in identifying, assessing, and remediating security vulnerabilities across the organization’s systems.
• Collaborates on protecting and managing endpoints (e.g., computers, servers) by implementing security controls and monitoring solutions.
• Configures and maintains network firewalls to control traffic and enforce security policies.
• Ensures secure cloud environments by implementing best practices, managing access controls, and monitoring cloud services.
• Leads in incident handling, investigates security breaches, and coordinates response efforts.
• Meet regularly with security team leaders and MSSP vendor to assess and collaborate on changes that would be built into security operations and controls.
• Facilitate and drive updates to security processes and tools to meet industry and technology evolution.
• Research relevant security technologies for potential improvements / best practice application.
• Research relevant security news topics to maintain understanding of current security threats, methodologies and potential risks to the firm

Qualifications:

• In-depth knowledge and practical experience with industry security standards and frameworks,
• In-depth knowledge and practical experience with industry standard security tools, including deployment, administration and usage, is needed maintain firm security programs owned by Information Security.
• Advanced understanding of IT and Security and Architecture fundamentals is required (Infrastructure, Azure, AWS, Operating Systems, Virtualization, Networking Concepts, Commands and Scripting, Network Security, Operational Security, Threats, Host Security, Access Control, Cryptography, etc.). This knowledge is necessary for designing effective event monitoring, security testing, and remediation plans for business applications and systems in the environment.
• Technical knowledge of vulnerability assessment and exploitation, and practical experience with risk analysis and mitigation strategies are necessary to perform security testing, and to work with other stakeholders to design effective remediation plans.
• Technical knowledge of security monitoring tools and practical experience with threat detection, threat hunting and incident response are necessary to perform event monitoring in this role.
• Maintain awareness of threat actors and attack trends, as well as those specific to the firm, to identify risks and provide recommendations to management in response to changing threat landscape.
• The ability to manage a number of projects, and be able to adjust quickly to changing priorities in a dynamic environment.
• Flexible, agile and able to manage work within ambiguity as necessary.
• Excellent organizational/project management and analytical skills.

Requirements:

• Bachelor's degree in Computer Science, MIS, Information Systems, or equivalent experience
• Graduate degree and /or relevant certification(s) desired
• 5 years in Information Security role
• Travel maybe required to perform job/project duties
• As required, work after-hours

We expect the candidate to uphold Kodiak’s values of Care, Trust, Courage, and Stewardship. These values define who we are. We expect all of our people to act ethically and with integrity at all times.