information security engineer hybrid.

job summary:
This role is not open to C-C or vendors. Direct W2 only.

Our enterprise client has an temp to perm or perm opening for an Information Security engineer.

Candidate will provide support and solutions and have an excellent understanding of information security principles and hands-on experience of host configuration, networking, operating systems, and cloud infrastructure is required.  
location: Edison, New Jersey
job type: Contract
salary: $60 - 78 per hour
work hours: 8am to 4pm
education: Bachelors
 
responsibilities:
Responsibilities:

• Research, validate and deploy solutions to meet security and business requirements
  
  
• Maintain an up-to-date level of knowledge related to security threats, attack techniques, vulnerabilities, and mitigations
  
  
• Work closely with infrastructure teams to advise and recommend tactical options to reduce attack surface, containment alternatives and impede attackers and limit exposure to new threats in the wild and verify the organization's security posture against them
  
  
• Collaborate with cross-functional teams to assess new vendors, evaluate their security controls, and identify potential risks to ensure alignment with the firm's security standards and risk tolerance.
  
  
• Help maintain a consistent, secure environment using configuration management solutions (e.g., TripWire, PowerShell Desired State.). Conduct rigorous oversight of security systems and security configuration administration to reduce risk to enterprise systems and accounts
  
  
• Collaborate with cloud and application teams to secure cloud assets and mitigate threats across the development and production cloud environments.
  
  
• Design, implement, and manage network segmentation and micro-segmentation strategies to isolate and protect critical assets
  
  
• Configure and manage secure web gateways/internet proxies to mitigate threats and data risks
  
  
• Monitor and secure enterprise databases against unauthorized or inappropriate access
  
  
• Proactively participate in incident response, forensics, troubleshooting and other security issues according to established procedures
  
  
• Interface with Internal Audit to proactively manage any identified issues so they are addressed in a prompt and efficient manner

Qualifications:

• Bachelor's degree and at least 4-6 years of cybersecurity experience supporting Security Operations or Information Security teams
  
  
• Deep understanding of Active Directory, server, endpoint, and network configurations with regards to risks and industry best practices
  
  
• Experience with Cloud Security Posture Management (CSPM) concepts, best practices, and platforms (e.g., Wiz.io, Orca Security, Aqua Security)
  
  
• Experience with securing public cloud infrastructure assets, including serverless infrastructure, containers, container registries and Kubernetes (e.g., Docker, AWS ECS, AWS EKS, AWS Fargate).
  
  
• Experience with OS baselines and configuration management processes and platforms (e.g., Tripwire CCM)
  
  
• Experience with scripting languages such as Python or PowerShell
  
  
• Experience with database activity monitoring processes, best practices, and platforms (e.g., Imperva SecureSphere, IBM Guardium)
  
  
• Familiar with Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), Secure Web Gateways (SWG) and Cloud Access Security Brokers (CASB) technologies and platforms (e.g., Zscaler, NetSkope, Palo Alto Prisma Access, Symantec Web Security Service)
  
  
• Familiar with network segmentation and micro-segmentation best practices and platforms (e.g., Illumio, GuardiCore).
  
  
• Familiar with anti-malware and Endpoint Detection and Response (EDR) platforms (e.g., SentinelOne, CrowdStrike, Microsoft Defender)
  
  
• Familiar with Data Loss Prevention (DLP) principles, best practices and platforms (e.g., Symantec DLP, Digital Guardian, Forcepoint DLP)
  
  
• Familiar with Web Application Firewalls (WAF), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), and Next-Generation Firewall capabilities and configuration.
  
  
• GSEC, GCIH, GCIA, GCFE, or CISSP preferable but not required

 
qualifications:

• Experience level: Experienced
• Minimum 7 years of experience
• Education: Bachelors (required)

 
skills:

Information Security (7 years of experience is required)

Network Security (7 years of experience is required)

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact HRsupport@randstadusa.com.

Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including health, an incentive and recognition program, and 401K contribution (all benefits are based on eligibility).

This posting is open for thirty (30) days.