Note: The job is a remote job and is open to candidates in USA. Gotham Technology Group is seeking a Senior Security Engineer to manage and support the firm’s security products and solutions. The role focuses on investigating security incidents, conducting security assessments and audits, maintaining security infrastructure, and evaluating new security technologies.
Responsibilities
- Manage intrusion detection sensors, firewalls, antivirus, web filtering solutions, DLP, IPS/IDS, NAC, DDoS protection, third-party remote access, application whitelisting solutions, and endpoint detection and response solutions
- Manage Security Incident and Event Management (SIEM) systems
- Manage and investigate all security events through to resolution
- Manage privileged account management systems
- Conduct technical security audits and perform risk assessments
- Perform firewall, network, and systems configuration changes and audits
- Run vulnerability scans across networks, servers, systems, and applications
- Produce weekly security reports, including tracking of information security metrics
- Collaborate with consultants and third-party vendors on the security services they provide
- Participate in project reviews of information security architecture for each initiative
- Research and evaluate new security technologies
- Maintain strong working relationships with third-party security vendors supporting Milbank (MSSP, SOC, and others)
Skills
- • Extensive knowledge of security best practices across computer systems, networks, telecommunications, and related hardware
- • Strong analytical approach to problem-solving and solution development
- • Genuine passion for security, with a commitment to protecting the Firm against evolving cyber threats
- • A customer-focused professional who is creative and able to balance security needs with business objectives
- • Strong team collaboration skills
- • Ability to think beyond traditional security approaches
- • Ability to work closely with the Director of Information Security, providing accurate, timely information and following direction closely
- • Capable of managing multiple projects and support functions simultaneously
- • Comfortable operating in a fast-paced, dynamic environment
- • Willingness to travel as needed
- • Availability for emergency off-hours calls during security incidents
- • Strong analytical, communication, and interpersonal skills
- • Ability to quickly identify root causes, particularly during incident investigations
- • Skilled at building accurate, detailed project plans and delivering them on time
- • Excellent documentation abilities, including creating SOPs, guidelines, and architecture diagrams
- • Able to perform job responsibilities with minimal supervision
- • Willingness to participate in weekend on-call rotation
- • Cisco network devices
- • In-depth experience with Palo Alto firewalls, including full feature utilization
- • Micro-segmentation technology (Illumio or similar)
- • SIEM products such as Microsoft Sentinel or equivalent
- • IDS & IPS tools (Vectra AI, Snort, Suricata, AlienVault, or similar)
- • Endpoint security products (CB Application Control, ThreatLocker, Microsoft Defender for Endpoint)
- • Vulnerability scanning and penetration testing tools (Nessus, Tenable, Rapid7 Nexpose, Cobalt Strike, or similar)
- • Open-source security tools (Kali Linux, Metasploit, Nmap, PowerShell Empire, Kerberoast, TrustedSec SET, and others) and network traffic analysis
- • Vulnerability management platforms (Tenable IO, Rapid7 Nexpose, Qualys, or similar)
- • Windows operating systems, Active Directory, DNS, DHCP, Microsoft SQL
- • Linux operating systems (Ubuntu, CentOS, RedHat)
- • Windows server and workstation security
- • Scripting languages (Python, VB, PowerShell, and others)
- • Privileged Account Management solutions (CyberArk, BeyondTrust, or similar)
- • Microsoft M365 E5 security products, Microsoft Azure, Microsoft Entra ID, Microsoft Defender, Microsoft Sentinel, Azure networking, Azure governance, and related Azure security controls
- Location : 100% remote but must reside in any of the following states: NY, NJ, CT, PA, KS, MO, CA, MD, D.C., or VA
- • Windows security features (Credential Guard, Application Guard, and others)
- • Authentic8 Silo and other browser isolation solutions
- • Email protection solutions such as Mimecast, Proofpoint, Exchange Online, and others
- • DLP products (Exchange Online DLP, Microsoft Endpoint DLP, Microsoft Azure Information Protection)
- • Third-party vendor remote access solutions (BeyondTrust or similar)
- • Forensic analysis using Guidance EnCase or open-source tools
- • Cloudflare
- • Forescout
- • Vectra AI
Benefits
- 100% remote but must reside in any of the following states: NY, NJ, CT, PA, KS, MO, CA, MD, D.C., or VA
Company Overview