Security Engineer IV - Incident Response

JOB SCOPE

Responsible for leading the security engineering activities that monitor, detect and alert on potential security threats and vulnerabilities to the company's telecommunications and signal processing hardware, software and electrical systems. Works closely with network engineering and technical operations staff to identify and detect vulnerabilities and risks to Charter's assets. Leads and coordinates remediation efforts and the incident response process for network security operations and communicating remediation and event status to security management. Develops security policies, standards, configurations and counter-measures

DUTIES AND RESPONSIBILITIES

• Designs and implements queries and use cases to correlate security relevant system and application log data to alert and report on potential security events.
• Leads the security incident response lifecycle for any cyber security related event affecting Charter's network and services. Responsible for providing timely updates to security management according to Charter's Incident Response Plan.
• Implements, maintains and monitors threat intelligence data from various resources that is relevant to Charter's networks and systems.
• Proactively hunts for security related threats and vulnerabilities potentially affecting Charter's network and services.
• Develops and coordinates the implementation of security counter-measures with the appropriate organizations.
• Develops and recommends security policies, standards and configurations to the security governance committee.
• Leads and performs the advanced forensics analysis and data evidence gathering for critical security events.
• Recommends, designs and implements security systems and tools used by Network Security Operations and provides ongoing system support.
• Develops security requirements for new projects and performs the security testing prior to going into production.
• Performs and coordinates engagements with 3rd party service providers to perform ongoing security penetration testing and ethical hacking on critical assets.
• Ensures compliance with security standards, policies and procedures.
• Adheres to industry specific local, state, and federal regulations, as applicable

BASIC / MINIMUM QUALIFICATIONS

• Bachelor's Degree or Master's in Computer Science or Information Systems or related field or equivalent experience

• Minimum five (5) years of IT/network experience

• Minimum five (5) years of Information security experience

• Minimum four (4) years of Information security operations experience

REQUIRED JOB QUALIFICATIONS

• Ability to read, write, speak and understand the English language to communicate with employees, customers, suppliers, in person, on the phone, and by written communications in a clear, straight-forward, and professional manner
• Expert knowledge of network and system security vulnerabilities and exploits
• Must understand what is required to prevent security exploits, how to detect security attacks and anomalies and how to respond to security incidents and intrusions
• Expert knowledge of forensic methodologies and best practices to investigate intrusions, preserve evidence and coordinate a unified security response
• Advanced knowledge in network security, TCP/IP, DOCSIS, application and cloud security
• Advanced knowledge of industry security standards and cyber security frameworks.
• Demonstrated experience in managing information security events and incidents for large and sophisticated networks
• Demonstrated leadership capabilities with the ability to work across functional boundaries, build consensus and drive results
• Strong written and verbal communication skills and should have good presentation skills
• Must be a problem solver, able to balance competing priorities, have a strong process orientation and be able to manage through complexity and rapid change

PREFERRED JOB QUALIFICATIONS

• Current security certifications, such as CISSP, CEH, and SANS GIAC. Firewall, Intrusion Detection Systems, and router engineering
• Botnet and Denial of Service detection and remediation
• Ethical hacking and penetration testing
• Security Information and Event Management (SIEM)
• Computer forensics
• Cyber Security Risk Management and assessment methodologies

WORKING CONDITIONS

• Office Environment
• 24x7 Network operations support
• May require some weekends and evening shift work
• Minimal Travel Required