Security Engineer

Full-time

Kansas City, MO

About the position

Advantage Tech is seeking an experienced Security Engineer to play a pivotal role in safeguarding the organization's computer networks and systems. This position demands a comprehensive understanding of both traditional network security measures and modern cloud-based protections. The ideal candidate will possess expertise in Azure Network Security Groups (NSGs), Azure Web Application Firewalls (WAFs), network segmentation, Palo Alto technologies, and the hardening standards necessary for servers and network devices. The Security Engineer will be responsible for implementing and managing security frameworks that protect sensitive data and systems from cyber threats while ensuring compliance with legal and regulatory requirements. In this role, the Security Engineer will collaborate closely with information security, technology, and business leadership to design, implement, and manage network security measures that safeguard company assets. Regular reviews and recommendations for Palo Alto firewalls, Azure Web Application Firewalls (WAFs), Azure Network Security Groups (NSGs), and other security infrastructure devices will be essential to ensure robust security. The candidate will also develop and maintain hardening standards for both physical and virtual servers, network devices, and other critical infrastructure to mitigate vulnerabilities effectively. The Security Engineer will create and enforce security baselines for all network and system devices, ensuring the consistent application of security policies across the organization. Additionally, the role involves ensuring that Security Information and Event Management (SIEM) systems, such as Sentinel and Splunk, are updated and optimized to capture, analyze, and respond to security events and incidents effectively. The candidate must also have experience with data protection measures, including Data Loss Prevention (DLP), Microsoft Information Protection (MIP), and Microsoft Purview. The role requires the ability to respond to security-related emergencies that may arise outside of regular business hours and participation in the security team On-Call rotation.

Responsibilities

• Work with information security, technology, and business leadership to design, implement, and manage network security measures to safeguard company assets.
• Perform regular reviews and suggestions for Palo Alto firewalls, Azure Web Application Firewalls (WAFs), Azure Network Security Groups (NSGs), and other security infrastructure devices.
• Develop and maintain hardening standards for physical and virtual servers, network devices, and other critical infrastructure to mitigate vulnerabilities.
• Create and enforce security baselines for all network and system devices, ensuring consistent application of security policies across the organization.
• Ensure SIEMs, like Sentinel and Splunk, are updated and optimized to capture, analyze, and respond to security events and incidents effectively.
• Respond to security-related emergencies that may arise outside of regular business hours.
• Participate in security team On-Call rotation.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 5 years of experience in information security, focusing on network and server security.
• Strong understanding of server and network architectures, including security best practices.
• Experience with scripting languages (PowerShell, Python, etc.) for automation of security tasks.
• Familiarity with compliance frameworks (ISO 27001, GDPR, HIPAA, etc.).
• Excellent problem-solving skills and the ability to work under pressure.
• Strong communication and collaboration skills.

Nice-to-haves

• Professional certifications are highly desirable.