Cyber Security Engineer Email & Endpoint

Job Description

Key Responsibilities:

• Work with Messaging Collaboration Security Engineering teams to evaluate the email messaging security across different workflows work towards improving the overall security posture.
• Completely own, manage, monitor administer the email security stack policies for both OnPrem cloud environments that include Cisco IronPort, Proofpoint, O365 native security solutions, Palo Alto Wildfire, etc.
• Work closely with systems administration teams to gracefully expand the Endpoint security solution footprint across FactSet through properly planned executed phased approaches, balancing the risk between security availability.
• Work with application teams, administration teams vendors in evaluating troubleshooting the issues introduced by the Endpoint security solutions.
• Active administration of the email endpoint security Infrastructure through established change control procedures practices.
• Act as a subject matter expert for both Email Endpoint security solutions provide required support for the IR Teams during incident investigations.
• Effectively lead the security projects/tasks assigned by taking ownership of planning, implementation coordination.
• Work closely with the rest of the Security teams to drive proactive correlation between different security stacks to improve the overall posture.
• Own the respective operational queues, request prioritization, handovers, SLA adherence to achieve the agreed service levels.
• Effective vendor management by engaging regularly with vendor account managers to drive priorities, product enhancements, technology upgrades, licensing, costing vendor road maps.
• Identifies opportunities for process and procedure enhancements to drive operational efficiency and customer service levels.
• Documentation of the process procedures/technology contributing to the drafts/reviews of SOP s playbooks.

• Collaborates with Engineering Teams, Departmental leadership in order to align with established Departmental/Organizational roadmaps.
• Keep up to date with technology changes in the domain provide inputs as necessary to the Engineering leadership groups.
• Participates in the on-call rotation as per the schedule for any escalations outside business hours.

Required Skills:

• 5-8 years relevant experience
• Solid understanding of different OnPrem Cloud email solutions, related workflows , associated industry standard protocols , deployment scenarios , security stacks , risks the ability to use this knowledge during Technology evaluations IR.
• Experience working on/administering any of the email security solutions (Example: Cisco IronPort, Proofpoint, Mimecast etc.)
• Experience in designing effective policies to achieve desired results in Spam Phishing filtering, DLP Malware defense.
• Experience integrating the Email / Endpoint security platforms to other security stacks like SIEM, Threat Intel feeds to ingest actionable intel output actionable alerts.
• Experience in deploying expanding Endpoint security solutions across different OS stacks application sets.
• Strong understanding of OS Internals, core concepts of operating systems and the ability to troubleshoot the issues arising out of the EPP deployments.
• Experience working with different sandboxing solutions ability to analyze malicious activities/executables on End Points using different native non-native tools.
• Ability to work with multiple partner teams to drive the security projects priorities.
• Ability to work with IR Teams to help investigate incidents by providing the required data/evidences to establish events.
• Good understanding of the virtualization (VM ware) Cloud technologies (AWS services, CASB s etc.)
• Solid understanding of OSI layers grasp of the commonly used L7 protocols.
• Experience on Orchestration/automation solutions would be helpful.

Other Relevant Skills:

• Written and oral communication ability to engage partner teams in driving conversations.
• Ability to thrive on high ops tempo, high-stress environments
• Strong team player
• Ability to provide on-the-job training and knowledge sharing to other engineers.
• Self-initiative with strong time management
• Solid sense of integrity and identification with the mission

Keyskills :
firewallnetworking customer relationsids penetration testingos internals email securitychange control