Engineer II - OT Security Engineer

This role is responsible for supporting the planning, execution, and management of multi-faceted projects related to risk management, mitigation and response, compliance, control assurance, and user awareness for all IT systems. Engineers II support, monitor, and maintain information security infrastructure to protect the company's computer systems and networks from cyber-attacks and help execute the information security program in compliance with policy and applicable regulations. They assist in developing and implementing driving security strategies, and policies/standards, ensuring the effectiveness of solutions, and providing security-focused consultative services to the organization. They perform penetration testing, vulnerability, and other security tests on software applications and assist in remediating identified programming flaws. They work closely with other engineers to conduct research, analyze security weaknesses in the current infrastructure, and recommend appropriate strategies to strengthen controls. They analyze known and emerging threats to determine risks against asset creation, maintenance, and governance.

Primary Responsibilities:

• Supports information security infrastructure to protect the company's computer systems and networks from cyber-attack and ensures information security compliance to all infrastructure

• Assists in the implementation of enterprise-wide security policies, procedures, and standards to meet compliance responsibilities

• Provides support to security incidents and assists in forensics investigations

• Assists on security initiatives/issues for one or more Information Security Strategy/Cybersecurity functional areas (e.g., Cyber Operations, Incident Response, Threat Intelligence, Threat Hunting, Forensics, Vulnerability Management, Data Analytics)

• Assists in security assessments and attestations and works on security initiatives/issues for like identity management, access control, security clearance, etc.

• Performs manual and automated penetration testing, vulnerability, and other security tests on software applications and assists in secure code reviews, and remediating identified programming flaws

• Assists in coordinating with architects and testing teams to ensure servers and network devices conform to security standards and that security devices and controls are working as designed

• Gathers and analyzes reporting, metrics, and key performance indicators for executive review

• Assists the Lead Engineer in maintaining service-level agreements (SLAs) to ensure that security controls are upheld

• Guides, coaches, and mentors Engineers I in information security policies and procedures

• Collaborates with the other IT teams to focus on improving cloud and application security measures and integrate new and support existing security applications

• Conducts research and analyzes security weaknesses in the current infrastructure and recommend appropriate strategies to strengthen controls

• Gathers reporting, metrics and key performance indicators to measure and validate the effectiveness of existing security controls for team review

• Assists in the evaluation and recommendation for tools and solutions that provides cyber, data, mobile, and cloud security functions

• Supports in managing the computer security program and applying IT security principles, methods, and security products to protect and maintain the availability, integrity, confidentiality, and accountability of information system resources and information processing

Qualifications:

Education:

• Bachelor's Degree in Computer Science, Information Technology or any other related discipline or equivalent related experience.

Preferred Certifications:

• Azure Security Engineer Certification

• Certified Cloud Security Professional (CCSP)

• Certification in Information Security Strategy Management (CISM)

• Certified Information Systems Security Professional (CISSP)

• CompTIA Security + Certification

• Systems Security Certified Practitioner (SSCP)

Work Experience:

• 2+ years of directly-related or relevant experience, preferably in information security.

Behavioral Skills:

• Critical Thinking

• Detail Oriented

• Interpersonal Communication

• Learning Agility

• Problem Solving

• Multitasking

Technical Skills:

• Network Solutions and Systems

• Cybersecurity

• Data Security

• Cloud Security

• Programming and Development

• IT Risk Management

• Root Cause Analysis

• Information Security Strategy Standards (SOX, ISO 27001/27002, COBIT, ITIL, NIST, PCI)

Tools Knowledge:

• Microsoft Office Suite

• Programming and Development Languages - JavaScript, HTML/CSS, Python, SQL

• Security Tools - SIEM, EDR, Email Security Gateway, SOAR, Firewall, Anti-virus, Firewalls, VPN IDS/IPS, AV, proxies, etc.

We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit https://www.virtualfairhub.com/cencora

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.

The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email hrsc@cencora.com. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned