Security Engineer (Remote)

Job Summary:

We are seeking a Security Engineer to help manage the Avenu Information Security programs, policies, and technical controls. The optimal candidate will be a mid-level engineer with several years of security experience and skills. The Avenu IT Infrastructure and Security Team is responsible for IT project planning and execution to support business objectives and key initiatives. The team is also responsible for the operations and security of the Avenu Enterprise and Client Hosting environments on premises and in cloud. This includes architecture, design, provisioning, administration, troubleshooting, and maintenance activities across multi-cloud and on premises services, security, networking, storage/virtualization, systems, and NOC/Help Desk.

Duties and Responsibilities:

• Meeting with business units and clients to determine and capture detailed requirements;
• Clarifying a system specification, understanding work practices and the nature of the business of the requestor and stakeholders;
• Contribute and refine the team’s process and methodology, including documentation.
• Creating high-level implementation plans when required;
• White-boarding complete or partial solutions;
• Presenting solutions in written or oral reports;
• Creating project deliverables and other types of artifacts;
• Designing, installing, integrating, testing, and monitoring new systems;

Education and Experience:

• 5+ years of experience, including configuring, analyzing & troubleshooting complex security environments
• Industry security certification such as CISSP, CISA, CISM, CRISC, CCSK and CEH - desired
• BS in CS or EE and/or 5 years related experience with specific focus on Next Generation Firewall design and implementation over the past 5 or more years
• Azure Cloud Platform certifications;
• CCNP/CCIE Security
• Palo Alto PCNSE desired. ACE/PCNSE 6/7 considered
• AWS Certified advanced networking;
• ITIL V3 foundation certification;

Knowledge, Skills and Abilities:

• Strong communication and interpersonal skills;
• Ability to work independently and in a team environment to produce outstanding results;
• A logical approach to problem solving/analytical skills;
• Ability to learn quickly;
• Confident decision making;
• Excellent customer service skills;
• Good organizational and time management skills to prioritize heavy workloads;
• The ability to communicate technical information to non-IT clients and colleagues;
• Experience with maintaining and advancing an overarching Information Security Program
  1. Security programs, policies and processes
  2. NIST Cyber Security Framework (CSF)
  3. Security Awareness program
  4. Vulnerability Management program
  5. Risk Management program
  6. Data Security program
  7. Application Security program
• Mid-level knowledge and experience with security design, implementation and support:
  1. Vulnerability Scanning and Pen Testing solutions (Qualys a plus)
  2. Log Management & Analytics solutions
  3. Security Awareness solutions (KnowBe4 a plus)
  4. Cloud-based security platforms (Zscaler a plus)
  5. Endpoint Security solutions (Sentinel One a plus)
  6. Cloud Security (Azure/AWS Security Controls, CASB)
     • Cloud Edge Security including Transit Architectures (Palo Alto VM in Azure a plus)
  7. Application Security
     • Uunderstanding of SDLC methodology
     • DevSecOps tools and practices
  8. Data Security solutions (Spirion and Zscaler a plus)
  9. Email Security solutions (Tessian a plus)
  10. Vulnerability management and Risk Management solutions (ServiceNow a plus)
  11. Firewall management and troubleshooting (Palo Alto a plus)
  12. Identity and Access Management solutions exposure
  13. Solid understanding of routing and switching architectures (industry certifications preferred)
• Experience in solution requirements gathering;
• Experience with documentation of infrastructure design, system builds, configurations, and support procedures;
• Experience with data center networking technology;
• Experience with Cloud networking desired;
  1. Azure networking experience (e.g. ExpressRoute, VPN Gateway, Virtual Networks, Security Groups, Network Virtual Appliances, Routing, Load Balancing, Traffic Manager);
  2. AWS networking experience (e.g. DirectConnect, vPC, Security Groups, Routing, VPC Gateways, Elastic IP, Route53, Load Balancing, Global Traffic Management)

Work Environment:

• The noise level in the work environment is usually moderate as the employee works in an office setting, at an individual work station, using telephone and computer

Physical Demands:

• Must be able to remain in a stationary position for most of the day
• Constantly operates a computer and other office productivity machinery, such as a printer/copy machine
• This position needs to occasionally move about inside the office
• The person in this position frequently communicates via telephone

Avenu Summary:

Avenu provides local governments with ways to achieve more predictable revenue that supports growth, fuels modernization and ensures compliance with mandated but underfunded programs. Avenu’s revenue enhancement and administrative solutions find and recover license, permit and other taxes that cities and counties struggle to collect. The insights and improved fiscal posture enables governments to deliver expected services and sustain a high quality of life for residents.

Avenu is an Equal Opportunity Employer. Selection for a position will be made without regard to race, religion, national origin, sex, political affiliation, marital status, non-disqualifying physical handicap, and age.