Building Service 32BJ Benefit Funds

Security Engineer

• Lead and manage the IT Security Operations team, including Information Security Analysts, Engineers, and Incident Responders.
• Provides guidance and expertise in the field of risk management regarding the protection and security of digital assets in the cloud and on-premises.
• Designs and develop Information Security architectures to prevent unauthorized access to our system, networks, data, and information.
• Develops, maintains, enhances, and implements information security policies and procedures, including the Information Security Policy Manual, Incident Response plans, playbooks, runbooks, and the Business Continuity Plan documents on a regular basis as changes occur.
• Coordinates and performs business continuity planning and incident response exercises on an annual basis within IT and with business champions.
• Coordinates and leads response efforts during security incidents.
• Manages, maintains, and monitors security technologies such as vulnerability scanning solutions, IDS/IPS, anti-virus technologies, DLP capabilities, SIEM technologies, EDR, host forensics and malware analysis, core and web application firewalls, network security groups, threat intel platforms, and proxy solutions.
• Oversees and collaborates with our Security Operations Center (SOC) provider to review threat alerts, reports, and ensures the team follows up on all actionable information.
• Receives guidance and collaborates with our vCISO to manage all security initiatives, risk mitigation plans, annual assessments, security audits, and penetration testing activities.
• Manages real time threat detection technologies to identify and quarantine threats, monitors endpoint security alerts and takes corrective action.
• Minimizes security threats by examining governance, technology infrastructure, and facilities to identify security deficiencies, using risk analysis and follow up with corrective action plan.
• Monitors internal control systems to ensure appropriate access levels are maintained, protects against unauthorized system access, modification and destruction.
• Reviews security related reports, logs and occurrences; escalates issues and initiates security response procedures.
• Creates and reviews vulnerability reports, tracks compliance with vulnerability management policies, and escalates.
• Researches and evaluates emerging technologies, latest cybersecurity threats, trends, tools, and best practices in support of security technology enhancements applicable to the organization’s environment, proposes technical solutions to management, to address security weaknesses, and coordinates with relevant stakeholders to implement.
• Reviews, updates, and enforces data security practices within the organization; tests for exposures to ensure adherence to relevant regulations and frameworks (e.g., NIST, ISO 27001, PCI-DSS, HIPAA) and procedures and works with platform experts to implement remedial measures as appropriate.
• Tests security controls and manages the associated remediation of any deficiencies as needed.
• Assesses security information, triaging and responding to security events, identifying false positives, and conducts correlation analysis across numerous internal and external data sources while prioritizing information security incidents.
• Performs project management tasks for security initiatives and projects.
• Manages incident-handling processes, which include implementation of containment, protection, and remediation activities.
• Supports information security training and awareness by providing ideas and content and collaborates with the Training and Development department with updates to employee security awareness education and training.
• Manage multiple priorities and deadlines concurrently.
• Provides support after hours, on weekends, and through on-call rotation.

Manager, Information Security