Security Engineer
Description
The Tyler Technologies’ Information Security Operations team is looking for an accomplished security professional to join our Security Operations team.
The role is responsible for elevating the overall security posture of the enterprise by supporting and applying security through industry best practices in software design, architecture, compliance, and incident response. The Engineer is responsible for configuring the collection, parsing, correlation, and visualization of system/cloud vulnerabilities for critical operational systems. The successful candidate will demonstrate strong skills in system administration, system management, vulnerability correlation, and threat identification as it relates to vulnerabilities.
This fast-paced multi-faceted environment requires a highly motivated, self-driven, team player who demonstrates an intrinsic desire for continuous personal and professional growth.
Responsibilities
- Administer various open-source and enterprise-grade security platforms to support developing and enhancing SIEM and vulnerability management.
- Implement data structures and pipelines to organize, collect and standardize data to helps generate insights and address reporting needs.
- Perform security audits and assessments of business units against corporate policies, standards and industry requirements and report findings.
- Implements security monitoring and correlation rules in SIEM platforms, according to business needs and requirements.
- Provide expertise within a Linux environment, editing and maintaining configuration files and applications.
- Maintain and enhance architectural, configuration and procedural documentation of the current and future security infrastructure.
- Troubleshoots issues with log sources or systems with vendors and stakeholders, and reports system defects as needed.
- Serve as a hands-on technical resource working directly with various internal teams that include staff from development, management, cloud services, and executive leadership to provide guidance and ensure solutions adhere to security policy and industry best practices.
- Develop scripts and automation processes that perform tasks such as desired state security configuration, systems deployment and management, or application level configuration.
- Contribute to the development of enterprise-wide cyber security strategy by contributing to efforts with other stakeholders and working service providers as needed.
- Ensures that all SIEM components and vulnerability scanning/assessment tools are maintained, updated, monitored, accessible, and available according to Cybersecurity standards, while partnering with other engineers in the evaluation, testing, and implementation of diverse solutions.
Qualifications
- Bachelor’s degree in IT or related area of study and/or comparable work experience
5+ years of progressively increasing responsibility in cybersecurity and SIEM management/operations. - Advanced knowledge of security technologies such as vulnerability management, intrusion detection/prevention, log monitoring, endpoint protection, and forensic analysis.
- Experience creating Dashboards and Analytics within SIEM and vulnerability management tooling.
- In depth knowledge of multiple operating systems and technologies including, but not limited to, Windows Server, *nix server, process automation and scripting, and common ETL data manipulation processes.
- In-depth familiarity with internet, WWW/CGI applications and TCP/IP protocols.
- Experience working in and securing highly virtualized or cloud-based environments such as AWS or Azure.
- Experience creating Dashboards and Analytics within industry standard SIEM tooling.
- Strong interpersonal communication skills while interacting with both entry-level and executive users.
- The ideal candidate qualifications include:
- The ability to effectively communicate security exposures, misuse, and noncompliance situations to appropriate technical and non-technical personnel.
- Extensive experience managing *nix systems and implementing SIEM and vulnerability management processes and procedures.
- Hands-on experience designing and managing ETL data processing pipelines to ingest data into SIEM or a data warehouse.
- Understanding of network and endpoint security tools and how they integrate into a SIEM platform and provide a cohesive view of network incidents and security.
- Proficiency in one or more scripting languages (e.g., PowerShell, Python, Bash).
- Thorough understanding of core networking principles such as DNS, VLANs, firewalls, and load balancing.
- One or more professional level IT certifications (e.g., CISSP, CASP, CIPT and/or CCSK).
#LI-SB1 #LI-DNI