Information Security Engineering Analyst III

Global Payment Holding Company - Torrance, CA

Full-time - Mid Level

Torrance, CA

10,001+ employees

Credit Intermediation and Related Activities

About the position

The Information Security Engineering Analyst III is responsible for developing, configuring, documenting, and maintaining information security solutions. This role involves installing and configuring security tools such as web proxies, intrusion detection systems, and vulnerability scanning systems to minimize threats and vulnerabilities to the organization's business systems and applications. The analyst will manage encryption protocols, authentication, and access controls, while also monitoring compliance with security standards and conducting periodic security reviews.

Responsibilities

• Develops, configures, documents, and maintains information security solutions.
• Installs and configures web proxies, intrusion detection systems, endpoint monitoring software, and vulnerability scanning systems.
• Ensures that threats and vulnerabilities to the organization's business systems and applications are minimized.
• Manages encryption protocols to protect the organization's data and manages authentication and access controls.
• Evaluates information security configurations when intrusions have occurred and monitors the effectiveness of implemented changes.
• Delivers secure solutions and/or secure remediation solutions for moderate to highly complex projects.
• Installs tools to specifically secure each level within the security framework for moderate to highly complex projects.
• Provides advice on new security technologies and trends and validates corporate conformance to industry standards.
• Investigates intrusion incidents, conducts forensic investigations, and provides incident responses.

Requirements

• Bachelor's Degree in Information Security or Computer Science preferred, or other relevant majors.
• Typically a minimum of 4 years of relevant experience.
• Experience defining, implementing, and maintaining corporate security policy along with standards and procedures.
• Knowledge of Advanced Persistent Threats, Network access controls, gateway Anti-malware, and enhanced authentication.
• Experience with one or more of the following certifications: CISSP, CISA, CISM, PCI-QSA, PA-QSA, PCIP, CRISC, CGEIT.

Nice-to-haves

• GCP and AWS Cloud skills.