Technical Support

Security Engineer

• Consult and participate in day-to-day security operational activities with clients;
• Confirm and document client vulnerability and security risks and develop mitigation plans;
• Monitor and validate client security controls;
• Respond to security alerts, incidents, and issues;
• Ensure security controls meet multiple compliance needs and best practices;
• Conduct, write, and present client Security and Risk Assessments using recognized frameworks (NIST SP 800-171 and PCI DSS v3.2 or other security compliance frameworks);
• Create accurate network diagrams and documentation for planning security-based changes, investigating network impact, and issuing resolution procedures;
• Coordinates and tracks security awareness training to the organizational workforce on information security standards, policies, and best practices;
• Consistently review relevant Cyber Security Compliances to educate clients on revisions and changes in requirements;
• Assist in investigating security breaches by leading the incident response to minimize impact, determine the cause of the breach, and ascertain the extent of the damage;
• Travel as needed for on-site assessments and meetings at client locations; limited and infrequent.

Security and Compliance Engineer – CMMC/NIST SP 800-171