Job Summary
The Senior Security Engineer position in Information Technology is responsible for:
• Collaborate with Security Leadership to lead the team on delivering against agreed upon organizational goals, accounting for the way Troy University operates and the unique challenges of securing the environment
• Schedule and participate in coaching and mentoring sessions with the team
• Perform and document annual performance reviews for the team
• Participate in defining security strategy for Troy University
• Actively manage the security program and provide consistent status updates to Security Leadership regarding progress against objectives
• Raise accountability by escalating issues in a timely manner and creating and maintaining detailed documentation
• Resolve issues, dependencies, and conflicts; ensuring that the team is involved, engaged, and informed
• Establish and maintain an enterprise application security scanning and vulnerability assessment infrastructure that will collect and store application vulnerability data from all environments, in a unified performance dashboard
• Design and ensure technical documentation is maintained for the area of responsibility
• Stay up-to-date with trends in the information security community
• Perform tech talks and other awareness campaigns to spread security knowledge throughout Troy University
• Other tasks as assigned
Minimum Qualifications
1. Bachelor’s degree in Computer Science, Engineering, Computer Security, Information Systems, or related field
2. Minimum of three years of enterprise security experience
3. Minimum of four years of Security or IT management experience, preferably for teams of four or more
4. Knowledge of various frameworks/regulations such as ISO 27001, NIST 800-53, NIST Cybersecurity Framework, GDPR, SOX, ITIL, COBIT, COSO or similar
5. Ability to manage and prioritize multiple tasks and projects and assist/advise engineers in establishing appropriate priorities
6. Ability to manage key customer relationships, including with senior managers
7. Ability to influence a cross functional team to accomplish goals
8. Excellent analytical skills and ability to learn quickly
9. Excellent written and verbal communication skills
10. Ability to be flexible
Preferred Qualifications
1. Accredited certifications, such as: CISSP, OSCP, GCIH (Certified Incident Handler), GCIA (Certified Intrusion Analyst), CEH (Certified Ethical Hacker), or CCNA (Cisco Certified Network Associate)
2. Previous SOC/NOC experience