Job Description

Our client, a financial services company, is seeking a Information Security Engineer

Location : Virtual, FL

Position Type : Contract

Job Summary :

The Information Security Engineer's focus is to develop and implement security solutions, which also includes current evaluation as well as keeping track of observance of the needed security guidelines all over the company computing environment.

This role may help conduct network and software vulnerability assessments and testing by utilizing reverse engineering techniques.

This job learns how to test the current state of the information security architecture and provides improvement recommendations by gathering key insights found from testing and analyzing the current systems and networks.

This job also assists with evaluating system security configurations and performing root cause analysis to determine how to provide optimal IT security for the organization.

Key Responsibilities and Duties :

• Providing operations and engineering support for critical security systems and services including servers, endpoint security, computer forensics, vulnerability / penetration assessment / mitigation, and security event management.
• Assists with executing vulnerability analysis and exploitation of applications, operating systems and networks.
• Designing security models, reviewing and approving security configuration and installation of firewall, VPN, routers, IDS scanning technologies, and servers.
• Works to identify intrusion or incident path or method through testing and evaluation procedures.
• Overseeing security awareness programs; educating and communicating to staff about information security polices, procedures, and practices.
• Helps design, develop and implement countermeasures, systems integration and tools specific to cyber and information operations.
• Monitoring industry security updates, technologies and best practices to improve security management.
• Learns how to resolve malware and intrusion issues within the system as they occur.
• Participating in the development of hardware / software / network security procedures and guidelines that support information security policies.
• Follows industry security updates, technologies and practices on a continual basis to improve overall security management.
• Helps serve as an internal information security consultant on the standards, complex issues and best practices for the organization.
• Contributes to the testing and analysis of complex software systems to determine both the functionality and intent of the systems.
• Assists with maintaining operational and configuration documentation and creates and maintains diagrams.
• Learns from and works with Cybersecurity Risk and Security Operation teams to enhance the overall security posture of the enterprise.

Job Requirements :

• Educational Requirements : University (Degree) Preferred
• Work Experience : 2+ Years Required; 3+ Years Preferred
• Physical Requirements : Physical Requirements : Sedentary Work
• This position will specialize in threat Client. Using our threat Client sources to determine what affects us and what we should be prioritizing and communicating out.
• Threat Client primarily deals with vulnerabilities and threats against the company.
• We work to identify those and work with the patching / remediation team to prioritize what should be fixed first, and what mitigating / compensating controls we have.
• The position will also touch on brand monitoring.
• Familiarity with brand monitoring would be helpful, however we have a managed service that will configure and triage alerts in this area.
• Candidates with relevant and current security certifications (SEC+, CISSP, CEH, etc)
• Threat Client Experience / Vulnerability Management Experience

Job Summary

Cheney Brothers is looking for hard-working, motivated individuals to join our security team.

Job Responsibilities / Requirements

• Welcoming and admitting visitors, and preventing unauthorized persons and items from entering company property.
• Managing the incoming / outgoing traffic.
• Presenting a positive image of the company.
• Conducting foot and vehicle patrols of the property (interior and exterior), inspecting for open doors, suspicious activity, spills, vandalism, and other dangers.
• Assisting with inbound deliveries.
• Logging inbound and outbound CBI trailers.
• Review camera feeds as needed.
• Enforce speed limit on property.
• Calmly respond to emergencies and accidents.
• Includes shift work.
• Other duties as assigned.

About Us

Cheney Brothers, one of the country’s leading broadline distributors, is family-owned and operated. We are looking for hard-working, motivated individuals to join our team.

In addition to being a great place to work , we offer competitive wages and a great benefits package, including a 401(k).

Applicants must be authorized to work in the United States. Cheney Brothers, Inc. maintains a drug free workplace and is proud to be an Equal Opportunity Employer prohibiting discrimination and harassment, including, but not limited to, in hiring, on the basis of race, color, sex, age, sexual orientation, religion, national origin, familial status, marital status, disability, military service, and any other legally protected status or class.

• Above is not an all-inclusive list of requirements or qualifications.

Mission

The Safety, Privacy and Wellbeing of our Clients.

• Provide protection and logistical support at clients' homes and when they travel
• Detect and defeat adversaries
• Create and maintain readiness to meet any threat
• Survey and prepare locations prior to arrival of the protected person
• Coordinate and execute plans for security and medical emergencies

Who You Are :

Military, law enforcement, or security background is meaningful, though not a requirement. We’re less interested in what you are than who you are .

Our most successful protectors come from a variety of backgrounds and have succeeded because they are physically fit, willing to learn, tell the truth, work together and prove to be trustworthy.

Our promotion system is merit-based. Performance matters most, not seniority.

Interested candidates should expect the following :

• $1k sign-on bonus
• Industry-Leading Compensation
• International / Domestic Travel when required
• 12-Day Introductory Training Academy, plus continual training and qualifications
• Highest Standard of Quality and Resources in the Industry
• Medical, Dental, Vision, and Life Insurance, 401k
• Gym, Massage, Ammunition and Cellphone Reimbursements

Successful Candidates will have these attributes :

• Wish to be of service and protect others
• Excellent communication ability
• Commitment to maintaining a high level of attentiveness and energy
• Excellent health and fitness, able to pass
• Drug and nicotine free
• Can pass a pre-employment background investigation

Note : We are also hiring for an Executive Protection Team Leader, view our complete list of job postings at .

Additional Benefits

Patrols on foot and by vehicle; uses a guard tour system to protect property against possible loss / damage from theft, trespassing, fire, vandalism or other hazards.

Screens visitors / employees as they enter the facility through the main lobby utilizing x-ray machines and walk-through / hand-held detectors;

monitors an integrated access control system and Closed-Circuit Television (CCTV) systems. Responsible for crowd control at high-profile events.

QUALIFICATIONS :

Graduation from high school or an equivalent recognized certification; minimum of two (2) years of experience in security work, including six (6) months of experience in computers to include Microsoft Word, Excel, PowerPoint and PDF documents.

Necessary Special Requirement : Must possess a current, State of Florida Class D Security Guard License (copy of License must be uploaded to online application within three 3 business days of application submittal).

PREFERENCE FOR EXPERIENCE WITH : Using metal detectors, x-ray machines and CCTV Systems (must specify on application) ; using computer-based security and access control systems (must specify on application) .

Also desirable : Associate's Degree in Criminal Justice (must specify on application) .

Overview

Under the direction of the Chief Information Officer, Information Technology will be responsible for the Information Security Program in partnership with the Chief Compliance Officer and his / her team.

The manager, Information Security will work under the Director, IT Infrastructure and Operations, to carry out the duties that will support the Information Security policies and practices of the organization.

Skills of a Manager, Information Security include but are not limited to : Strong policy and process knowledge including HIPAA, SOX, IT auditing skills, and has the expertise to deal with a variety of technologies and customers.

Professional interaction with all District departments is imperative. This position requires IT competency in information security and security risk assessments in the healthcare industry.

Proficiency in designing and managing security remediation plans is a must and the ability to be hands on when necessary.

Strong technical skills : application and operating system hardware, vulnerability assessments, security audits, TCP / IP, log monitoring, intrusion detection systems, firewalls, etc.

Outstanding communication (oral, written, presentation), interpersonal and consultative skills. Must possess a high degree of integrity and trust along with the ability to work independently and with infrastructure teams.

Demonstrated organization, facilitation, communication, and presentation skills. Excellent documentation skills. Ability to weigh business risks and enforce appropriate information security measures.

Knowledge of information privacy laws and regulations including access and release of information. In-depth knowledge of the HIPAA Security Rules and related state regulations a must.

Demonstrates knowledge and experience with the following tools; Antivirus, intrusion detection / protection software, network access control, provisioning and de-provisioning of users, encryption, SFTP / FTP, security monitoring, data loss prevention, identity and asset management plus data communication.

Experienced in the following technologies : Cisco ASA and Firepower firewalls, Cisco VPN connections / client, Cisco ISE, Security information management (SIM), Threat Detection Management, log correlations, Authentication, RBAC, single sign on technologies, mobile device security protocols.

Responsibilities

Essential Functions :

• Recommend security systems that will provide detection, prevention, containment and deterrence mechanisms to protect and maintain the integrity of healthcare data.
• Manage Information Security program initiatives and staff to support security best practices and meet regulatory requirements.
• Contribute to the development and maintenance of all security related policies and procedures designed to protect the organizations sensitive information from misuse, unauthorized access and loss of integrity
• Ensures the ongoing interaction and flexibility of Information Security with District Business strategies and requirements.
• Ensures that the access control, disaster recovery, business continuity, incident response and risk management needs of the district are properly addressed.
• Responsible for the development, management and reporting of security remediation plans and risk registries to reduce the organizations overall security risk.
• Will attend annual security training classes and / or security certification programs where required.
• Ensure District Information systems are adequately protected and meet or exceed information security best practices and all regulatory requirements of the District.
• Provides security project management, security testing oversight, and risk remediation planning and coordination.
• Implement and maintain a security awareness program to educate all employees by way of email, PowerPoint, phishing tests, flyers or posters on a quarterly basis
• Coordinates internal and external communication, issue resolution, security vendor relationships, testing plans, training plans, and successful transition to additional IT infrastructure teams appropriately.
• Analyze changes in the regulatory area including the Payment Card Standard, Privacy Legislation, SOX, SEC guidance, HIPAA etc.

and provide the District with appropriate action plans for improving business functions.

• Act as internal consultant to District staff to assist in the implementation of such action plans.
• Work with vendors, outside consultants and other third parties to improve District Information Security.
• Participate in the incident response teams to contain, investigate and prevent future computer security breaches. Coordinates quarterly security audits.

Communicates findings to the Director, IT Infrastructure and other leadership as directed.

• Assists in the ongoing maintenance of the department’s business continuity / disaster recovery plan.
• Provides clear and concise statuses and project plans to the Director, Infrastructure and leadership as directed.
• Participates in on-call coverage as defined by IT management.
• Provides the technical leadership for security based projects.
• Emergency duty may be required of the incumbent that includes working in Red Cross shelters or to perform other emergency duties including, but not limited to, responses to threats or disasters, man-made or natural.

Qualifications

Education :

Bachelor’s degree in Information Technology or related field with a concentration in information technology security. Equivalent combination of experience, along with high school diploma or GED, may substitute for minimum education requirements.

Experience :

A minimum five (5) years’ experience in implementing and supporting information security for applications, web architectures, operating systems, databases, and networks in the health care industry.

Certification :

• CompTIA Security+ certification required.
• CEH : Certified Ethical Hacker preferred.
• CISSP Certified Information Systems Security Professional required.
• CISM Certified Information Security Manager preferred.
• Additional Microsoft or Cisco certifications a plus.

Licensure :

Valid Florida Driver’s License required.

Training :

Strong technical skills (application and operating system hardware, vulnerability assessments, security audits, TCP / IP, intrusion detection systems, firewalls, etc.

Knowledge and experience in information privacy laws and regulations including access and release of information. In-depth knowledge of the HIPAA Security Rule and other government technology laws including any corollary state law(s).