Security Engineer

Onsite Position in Avon Lake, OH

Client is seeking a cybersecurity expert to review, update, and enhance our existing cybersecurity design and documentation, align recommendations with NIST 2.0 standards, and improve our overall security posture. The scope of work includes network, endpoint, identity and access management, email, and SIEM systems.

Scope of Work:

Network

1. Firewall Rules and Policies:

* Review, document, and update firewall rules and policies.

2. Change Management Process:

* Develop a robust change management process for firewalls.

3. Network Design Review:

* Conduct a global network design review.

* Identify gaps and align with NIST 2.0.

Endpoint

1. Patching Process:

* Document a patching process that includes SLA tracking (patch tracking, reporting, ownership, etc.).

2. Vulnerability Management Process:

* Rebuild and enhance the vulnerability management process.

3. CyberArk - EPM Policy Creation:

* Design and architect CyberArk Endpoint Privilege Manager policies.

4. System Hardening:

* Review and update hardening policies in line with NIST 2.0.

Identity and Access Management

1. CyberArk PAM Design:

* Review, design, and manage CyberArk Privileged Access Management solutions.

Email

1. Exchange Online:

* Perform a requirements gap analysis versus configuration.

* Implement necessary changes.

2. Proofpoint:

* Conduct a requirements gap analysis versus configuration.

* Implement necessary changes.

SIEM

1. Log Capture Efficiency:

* Ensure SIEM log capture is efficient and effective.

Deliverables:

* Detailed review and updated documentation of existing policies.

* Actionable recommendations aligned with NIST 2.0.

* Implementation of agreed-upon changes and improvements.

* Finalized and updated processes for all mentioned areas.

Skills & Experience Required:

* Proven experience with NIST 2.0 implementation.

* Strong knowledge of network security, including firewall configuration and management.

* Expertise in vulnerability management, patching processes, and system hardening.

* Hands-on experience with CyberArk EPM and PAM solutions.

* Familiarity with email security solutions like Exchange Online and Proofpoint.

* Advanced understanding of SIEM configurations and log management.

After you have applied, download our Staffmark Group WorkNOW App to receive real-time job offers and apply for additional opportunities. You can download it from the App Store or get it on Google Play.

With company roots going back over 30 years, Advantage Technical is an engineering and information technology services company and a national leader in the provision of technical resources today. These services include Staff Augmentation, Direct Placement, Project Resourcing and Outsourcing - delivered from 40 key market locations, by over 3500 specialized contractors, to over 500 clients across North America. Advantage Technical is a Best of Staffing Diamond Award winner for both Clients and Talent. For more information about the industries and services offered by Advantage Technical, please visit AdvantageTechnical.com.

Advantage Technical is committed to providing equal employment opportunity for all persons regardless of race, color, religion (including religious dress and grooming practices), sex, sexual orientation, gender, gender identity, gender expression, age, marital status, national origin, ancestry, citizenship status, pregnancy, medical condition, genetic information, mental and physical disability, political affiliation, union membership, status as a parent, military or veteran status or other non-merit based factors. We will provide reasonable accommodations throughout the application, interviewing and employment process. If you require a reasonable accommodation, contact your local branch. Advantage Technical is an E-Verify employer. This policy is applicable to all phases of the employment relationship, including hiring, transfers, promotions, training, terminations, working conditions, compensation, benefits, and other terms and conditions of employment.

All employees are directed to familiarize themselves with this policy and to act in accordance with it. All decisions with respect to employment matters and other phases of employer-temporary employee relationships will be in keeping with this policy and in accordance with all applicable laws and regulations.