Information Security Engineer

JOB DESCRIPTION:
Responsible for ensuring that the District's IT and business communities understand and comply with the Federal Reserve System information security policies, practices, and industry best practices. Involves a mixture of consultive and required operational tasks to provide a complex level of subject matter expertise to IT and business customers. Operational tasks include, but are not limited to: vulnerability management resolution, intrusion detection system management, reviewing District security patching processes, provision of security awareness information, providing risk management process advice, creation and dissemination of security best practices, monitoring privileged account usage, providing review and monitoring of the District anti-virus status and performing local computer security investigations.
PRIMARY RESPONSIBILITIES:
Participates and/or leads risk and vulnerability assessments of District information assets and recommends appropriate controls to mitigate identified risks. Proactively verifies appropriate controls are implemented and tested. Tracks risk exceptions and provides risk gap analysis for District management. Ensures compliance with Federal Reserve System's information security policies, practices, and standards, through proactive monitoring and consulting, as well as providing information security awareness educational activities. Provides consulting services to business asset owners on all information security topics. Responsible for mentoring District information security staff and other IT professionals. Participates and/or leads project teams in identifying technical and process solutions to problems and identified risks regarding District information assets. Actively participates on District and/or System teams for information security related initiatives.
MINIMUM QUALIFICATIONS:
General Knowledge, Skills and Abilities:
•Excellent communication skills, written and oral.
•Understanding of and ability to work within the corporate culture.
•Strong problem-solving and analytical skills.
•Organizational, time management and planning skills in order to manage the workload and complete multiple job assignments with multiple deadlines.
•Self-directed and motivated with the ability to work independently with minimal direction.
Technical Knowledge, Skills and Abilities:
•Practical experience in and strong theoretical knowledge of the following areas: Active Directory Intrusion Detection Vulnerability Analysis Penetration Testing Incident Response
•Practical experience in and strong theoretical knowledge of the following areas: Windows and Unix Operating Systems Network Systems (TCP/IP, CISCO systems, etc.) Voice Communication Systems Database Systems (MSSql, Oracle, etc.) Application Systems (Application and Web Servers, etc.) Remote Access Systems Security Systems (e.g. Firewalls, Directory Services, PKI, Biometrics, Encryption, IPSec, etc.)
KEY COMPETENCIES:
Action Oriented: Enjoys working hard; is action oriented and full of energy and can be counted on to use energy to achieve desired results.
Customer Focus: Is dedicated to meeting the expectations and requirements of internal and external customers; establishes and maintains effective relationships with customers and gains their trust and respect.
Political Savvy: Can maneuver through complex political situations; is knowledgeable as to how people
and organizations function.
Interpersonal Savvy: Relates well to all kinds of people inside and outside the organization; builds constructive and effective relationships.
Composure: Is cool under pressure; is considered mature; can handle stress; is a settling influence in a crisis.
Organizing: Can marshal resources to get things done; uses resources effectively and efficiently. Welcomes the opportunity to take charge and is proactive in performing job responsibilities. Presentation Skills: Is effective in a variety of formal and informal presentation settings; is effective both inside and outside the organization.
Problem Solving: Makes good decisions. Solves difficult problems with effective solutions; is excellent at honest analysis.
Business Excellence: Is dedicated to providing the highest quality products and services.
Written Communications: Is able to write clearly and succinctly in a variety of communication settings and styles.
EDUCATION & EXPERIENCE:
Above knowledge, skills and abilities may be demonstrated by at least three years of practical experience in the field of Information Security.
A Bachelor’s degree in Business, Management Information Systems, Computer Science or related field of study.
Project management experience preferred.
CISSP and/or PMP certification a plus.
Equivalent education and/or experience education may be substituted for the above.
WORK HOURS & CONDITIONS:
8:00 a.m. to 5:00 p.m., Monday through Friday.
On-call support and overtime as required by work schedules or management.
NOTE:
By federal law, this position requires that candidates fall within one of the following citizenship categories: (1) U.S. Citizen, (2) U.S. National, or (3) U.S. lawful permanent resident alien ("green card" holder) who is eligible for and seeking U.S. citizenship within the requisite time frames.
SALARY/CREDIT CHECK:
The salary for this position is market-priced and will be based on the qualifications of the candidate selected for the position. Also, this is a data security/custody control position. The candidate selected for the position must pass a financial credit check.  EOE  Apply at:  https://federalreserve.myvurv.com/MAIN/careerportal/Job_List.cfm?szSearchType=Advanced