Information Security Engineer

Aqueduct Technologies is seeking an Information Security Engineer for our customer based in Cambridge, MA. The Information Security Engineer is responsible for supporting a risk-based Information Security program as well as assisting in providing protection guidance with respect to applicable regulatory areas. The Information Security Engineer will be responsible for developing policy, process and procedure as well as identifying cyber risks, advancing the information security program and monitoring for compliance. This includes safeguarding the security of all computing platforms, data, networking, assist in the oversight of the security configurations, and monitoring. Due to the nature of the work the individual needs strong analytical, communication, controls and risk assessment skills.Essential Responsibilities:

• Perform event log analysis to identity threats and develop alerting parameters.
• Working knowledge of CrowdStrike End Point Security, Okta, and Multifactor Authentication.
• Generate and track metrics for Information Security team
• Create and maintain metrics and dashboard for senior leadership team
• Develop and refine supporting content for security tools (e.g. dashboards, alerts, reports, rules), including but not limited to the configuration and monitoring of security tools
• Support all phases of incident response life cycle: analysis, containment, eradication, remediation, recovery through development of content / automation tools
• Develop scripts in support of integrating tools and generation of metrics
• Research and respond to third party Security Operations Center notifications
• Assist in the develop and reporting of Key Performance Indicators of the Information Security program
• Lead/participate in the evaluation, development and implementation of security standards, procedures and guidelines for multiple platforms and diverse systems environment
• Provide Information Security representation and guidance for business projects
• Responsible for managing penetrations testing services
• Perform risk analysis/assessments across the global infrastructure
• Stay abreast of the latest information security controls, practices, techniques and capabilities in the marketplace, as well as evolving threats
• All other information security duties as assigned.

• Minimum of three years of information security experience utilizing scripting, Unix and open source security tools in an enterprise environment
• Bachelor’s degree in Computer Science or related field or an equivalent combination of education and experience. Industry standard certifications are a plus.
• Familiar with securing AWS environments
• Skilled in shell/bash, perl and or python scripting is required
• Understanding of network and system intrusion and detection methods and mitigation techniques
• Working knowledge of Active Directory
• Experience with at least one commercial vulnerability scanner is desired
• Knowledge of security policies, regulations, compliance issues, processes and standards (e.g. ISO, ITIL, COBIT, PCI, NIST, SSAE-16/18 standards) are a plus.
• Hands on network and system administration skills with Linux and Windows
• Must be a creative problem-solver and a self-starter able to set appropriate objectives and perform with minimal supervision.
• Experience working in a dynamic fast paced environment
• Strong interpersonal skills, ability to build relationships
• Able to be on site in Cambridge, MA as needed