Security Engineer

Job Description

Job Description – add details here

Description:

The successful candidate will be working with IT, industrial internet of things (IoT) and operational technology teams to lead technology driven business process transformation and innovation for Navy Federal Credit Union. They will partner with IT, Risk, Security and Audit teams to establish operational compliance that streamlines operations while protecting the organization

The ideal candidate will serve as a subject matter expert for Physical Security Surveillance systems using Avigilon Unity Cloud Solution having strong cyber/device security and network engineering skills. This candidate will work closely with the team to understand connected devices/internet of things in depth and to document the product details including the security architecture, trust boundaries and data flows. They will provide product security related coaching/mentoring and security expertise for all IoT device teams.

Responsibilities:

Professional understanding of the essential requirements of IoT architecture, scalability, real-time capability, data protection and security
Identify security risk in Navy Federal’s IoT device ecosystem and communicate those risks to management and assist with the mitigation efforts
Oversee and manage the deployment, integration and configuration of security solutions and any enhancements to existing IoT security solutions and the enterprise's security documents
Perform security research, analysis, and testing via threat modeling, vulnerability assessment, penetration testing, and/or social engineering across a wide variety of applications, platforms and systems
Work with Industry solution providers, equipment manufacturers, and the Enterprise Resource Planning vendor to design and implement the required systems integrations points and data flow to achieve best in class lights-out-operations
Partner with sensors specialists to manage new sensors data streaming to IoT platform, and with data scientists and machine learning engineers to take on analytic results and develop it to an application with user interface, integrate with any pre-existing systems, demonstrate successful use cases and wins, etc.
Understand systems flow, data source, data usage and technical requirements clearly, to meet the functionalities per user requirements
Accountable for the improvement and delivery of the applications geared towards the industrial communications and data collection

Qualifications:

Experience with Surveillance Systems, Cyber Security and Network Security
Experience with configuring and designing segmented networking
Knowledge of TCP/IP, HTTP, UDP, and XML
Knowledge of IoT software platforms such as ORDR, ARMIS, Azure IoT or Cisco IoT Hub
Proven ability to work creatively and analytically in a problem-solving environment
Familiarity with OT environment security with risk-based management, vulnerabilities, asset and threat protection, security behavioral analytics, and security environmental configuration
Note: All the considerations above should be addressed in platforms to include Cloud, On-Prem, Hybrid, with various operating systems
Minimum 7 years of Information Security and Physical Security Experience
Minimum of 5 years of Industrial Internet of things experience including rapid design, prototyping and deployment of embedded systems
Experience with communicating and data collection from systems such as sensors, controllers, and industrial systems
Able to articulate and present IoT concepts to senior management
Experience in Industrial environment is an asset
Experience with PLC, DCS and SCADA is an asset
Proven success in contributing to a team-oriented environment
Ability to align and influence critical stakeholders
Strong supporter of customer centricity. Understands the importance of demonstrating concern for satisfying customers. Passionate about developing goals to improve customer experience
Retain and convey a positive attitude in challenging circumstances