Summary Statement:
You will be working with a team of experts to resolve issues and create new security infrastructure based on current market trends.
What you will be doing:
As a Penske Systems Engineer – Cyber Security you will maintain network, server and workstation firewall protection and provide network and application scanning, security logging, and intrusion detection capabilities. You will provide security reviews and define security models for new systems based on current trends and developments. You will also collaborate with different teams within the IT department to discuss, analyze or resolve usability issues and work on projects to update or create new security infrastructures.
Major Responsibilities:
• Ensure associates follow security standards through oversight of the set-up of a user’s security access, administer network security access and monitor the associate’s use of data systems to safeguard company information
• Provide security reviews and define security models for new systems
• Analyze and recommend security products based on their performance
• Audit access to mission critical applications and to maintain compliance documentation for SOX and PCI
• Analyze and review annual SOX and other compliance reports
• Collaborate with different teams within the IT department to discuss, analyze, or resolve usability issues
• Work on 1-3 mid to large-scale projects concurrently, assigned from department and group senior leadership
• Mentor Security Administrators and Offshore Contractors
• Define, implement, communicate and update security architecture for multiple computing platforms, operating systems, data networks, applications, and client software
• Develop, implement, communicate, and update security policies and procedures for hardware, software, and network infrastructure
• Develop, implement, and maintain tools for effective security administration and monitoring compliance IT security policies and procedures as well as detection of attempted security breaches and intrusion
• Develop, test, and update disaster recovery plans to ensure that plans achieve desired results in protecting company assets and plans meet corporate risk and business resumption goals
• Develop training material to be used to develop awareness within corporation of security policies, procedures, best practices and other issues as needed
• Detailed understanding of Cloud Security fundamentals, including cryptography and the shared responsibility model
• Other projects as assigned