Security Engineer (EM)

Alcohol Monitoring Systems / Scram Systems - Littleton, CO

Full-time

Littleton, CO

About the position

The Security Engineer will focus on security concerns for the development, implementation, operations, and ongoing analysis of SCRAM Systems security and operational infrastructure. This role is crucial for fortifying the infrastructure against evolving security threats and ensuring the confidentiality, integrity, and availability of critical systems. The engineer will work closely with various teams to protect information systems throughout the organization and will be responsible for all security aspects related to both physical and cloud infrastructure.

Responsibilities

• Develop and maintain a comprehensive security strategy in collaboration with the CISO.
• Review and implement security architecture for Cloud and on-premises environments.
• Conduct security assessments to identify vulnerabilities and propose remediation measures.
• Implement advanced security monitoring and threat detection solutions.
• Lead incident response efforts and investigate security breaches and cyber-attacks.
• Develop and maintain incident response plans and conduct periodic drills.
• Maintain rules on an Elastic stack SIEM for threat logging and notifications.
• Establish and enforce security controls for major cloud providers, ensuring data protection and compliance.
• Monitor and analyze cloud security logs and reports to address potential risks.
• Harden and secure Windows and Linux-based VMs in various environments.
• Implement security measures for Kubernetes clusters and containerized applications.
• Regularly audit infrastructure security and manage patching and updates.
• Design and maintain IAM solutions to control access privileges and permissions.
• Collaborate with internal teams to ensure compliance with security standards and regulations.
• Conduct security audits, vulnerability assessments, and penetration testing as needed.
• Conduct security training sessions for technical teams.

Requirements

• Proven experience as a Security Engineer in a data-sensitive industry.
• In-depth knowledge of Cloud security, including IAM, VNet, and Security Center.
• Experience securing Windows and Linux-based VMs; proficiency in Kubernetes is a plus.
• Familiarity with security compliance frameworks such as NIST, ISO 27001, and CJIS.
• Hands-on experience with security tools and technologies, such as SIEM, TVM, IDS/IPS, and firewalls.
• Excellent problem-solving skills and strategic thinking about security issues.
• Effective communication and leadership skills.

Nice-to-haves

• Security and Industry certifications are a plus.
• Azure experience is not required but is a plus.