Information Security Engineer

Founded in 2001, WaveStrong is an industry leader in enterprise and cloud information security consulting services. We pride ourselves on our best of breed security solutions and services that span a myriad of government, education and business verticals. Our staff is comprised of both certified technical and business professionals who can help you successfully navigate complexities of planning, design, implementation and management of securing data. Our approach is vendor agnostic giving our customers the freedom to choose the best customized security model for their business.

Our Information Security Engineer will have the following duties:

1.      Develop and maintain security operations processes and procedures for WaveStrong’s clients;

2.      Write security control traceability matrices;

3.      Conduct reviews that ensure all security systems have effective, tested, quality documentation in place;

4.      Administer firewalls, intrusion prevention systems, data loss protection, endpoint protection, anti-malcode and spam filtering to security information and event management platforms and all supporting systems;

5.      Work with WaveStrong’s IT staff and their clients’ applications to establish security plans and technical environments to manage effective security operations.

6.      Conduct self-assessments for WaveStrong’s clients’ IT teams to ensure effective implementation of, and compliance with, established policies and procedures;

7.      Develop plans for incident responses, vulnerability assessments, penetration tests, and security audits;

8.      Establish a process to track remedial actions to mitigate risks in accordance with standards for clients’ plans of action and milestones;

9.      Provide mentoring to Clients’ IT teams as a means to develop job satisfaction and coordinate cross training opportunities with other technical support groups;

10.   Maintain operational controls, reports, and metrics;

11.   Provide tiered support for WaveStrong’s clients;

12.   Ensure each client’s sensitive data is protected throughout the enterprise; and

13.   Identify potential policy violations and provide reports to the clients.

REQUIREMENTS: Master’s degree in Security Engineering or other related field (such as Telecommunications, Computer Science, etc.), or foreign equivalent.

Please send your CV to WaveStrong, Inc. 2000 Crow Canyon Pl. Ste. 150, San Ramon, CA 94583

WORKING HOURS: 40 hours / week (minimum)

Salary: $130,208/year