IT, Security Engineer

IT Security Engineer

The IT Security Engineer is responsible for maintaining Family Dollar's information security controls and countermeasures to protect the integrity of all corporate intellectual property and mission critical applications. Serves as senior technical advisor on all enterprise data center and cloud computing environments. Recommends process and procedures consistent with directives, policies and standards for all aspects including acquisition, development and security compliance throughout all information systems components' lifecycles.

Assists with configuration and administration ensuring that information security incidents are identified with periodic audit trail reviews and improved detection capabilities. Proactively identifies, investigates, and proposes resolutions to vulnerabilities that could impact the endpoint, identity, and email security and service reliability. Responds to computer-based attacks, unauthorized access and policy breaches working closely with incident responders to remediate and recover from business impacting incidents. Responsible for taking a lead role as subject matter expert working with infrastructure, cloud and corporate datacenter teams with a focus on securing vulnerabilities and reducing risk.

Principal Duties and Responsibilities

• Design and engineer a comprehensive cybersecurity architecture, with a comprehensive focus around endpoints, Identity and Access Management (IAM), and messaging services.
• Identify, define, and document endpoint, IAM, and messaging service security requirements and recommend solutions to management.
• Develop, execute, and track the performance of security countermeasures to protect the Family Dollar infrastructure and intellectual property on computing systems.
• Implement, maintain, and monitor NIST security controls to protect Family Dollar's infrastructure, computer systems, users and data.
• Assist in the analysis, design, and development of a roadmap and implementation plan based upon a current vs future state.
• Responsible for providing security personnel with technical guidance and supervision.
• Review and provide guidance for creating standards for IT assets, service and applications, determining their efficacy and efficiency.
• Monitor for security breaches, using current Endpoint Detection and Response (EDR) solution and SIEM to detect intrusions and anomalous behavior.
• Ensure that the IT management team is aware of security incidents as much as possible, as quickly as possible.
• Take active role in incident response, including taking steps to minimize the impact and participate with Managed Detection and Response (MDR) partner in conducting a technical and forensic investigation into how the breach happened and the extent of the damage.
• Collaborate with Family Dollar's Security Operations team to improve the Incident Response Plan procedures and make updates as necessary to evolve with the needs of the business.
• Employ penetration testing, simulating attacks on systems/applications to find exploitable weaknesses in order to close security gaps.
• Assess existing Single Sign-on (SSO) and multifactor authentication processes. Make recommendations to improve user experience, consolidate user authentication methods to a single platform, and incorporate phishing-resistant MFA for corporate and store users.
• Support and maintain security tool hardware and software components by analyzing their functionality and designing and planning major upgrades and changes to ensure reliability and availability.
• Work on multiple projects as a technical lead and gather and analyze data and develop security requirements.
• Review configuration of endpoint, identity, and messaging services, and other security products and procedures to ensure it is aligned with Family Dollar's security control standards and industry best practices.
• Be available for other IT Engineers and Systems Administrators to collaborate to employ secure solutions.

Minimum Requirements/Qualifications

• Experience in planning and leading large-scale security projects.
• Excellent interpersonal, communication, and presentation skills.
• Supports a culture of security awareness and compliance within the organization.
• Strong analytical and problem-solving skills identifying risks and championing that change.
• Experience in interfacing with various levels of leadership and roles within our organization influencing security changes.
• 7+ years of experience in IT, with 5+ years in cybersecurity preferred.
• Expertise with the following modern security tool/services:
• Endpoint security tools – i.e. NGAV, EDR, Application Control (Crowdstrike, Bit9, Defender)
• Authentication and authorization tools / Privileged Access Management
• Email/Messaging/Collaboration security tools (Proofpoint)
• Automation
• Knowledge of risk assessment tools, technologies, and methodologies
• System administration experience, supporting multiple platforms and applications
• Knowledge of cloud security techniques in Azure, Oracle and Google.
• Experience in designing, implementing, supporting, and maintaining enterprise security solutions.
• Familiarity with security frameworks such as CIS, NIST 800 series.

Desired Qualifications

One or more of the following industry recognized security certifications is a PLUS:

• CISSP (Certified Information Systems Security Professional)
• CISA (Certified Information Systems Auditor)
• CEH (Certified Ethical Hacker)
• CISM (Certified Information Security Manager)