This is a full time, direct opportunity; Please no 3rd party recruiters or re-posting of this job description anywhere else.

Please make sure you include in your cover letter that you saw this posting on CCCURE.org so we may track the response. Thank you.

IT SECURITY ENGINEER

Salary negotiable

JOB SUMMARY
The IT Security Engineer performs highly technical information technology work dedicated to the engineering, monitoring, resolution and support of enterprise information and network security. The person in this position is responsible for researching, analyzing and troubleshooting information, data and network related security incidents and events. Work involves identifying, validating and reporting on security incidents and events based on enterprise policies and procedures; researching and reporting on advanced security related issues as well as making recommendations for improvements to infrastructure, systems architecture and enterprise policies; and performing forensic information security investigations involving any/all enterprise computers, computer systems and servers and networking infrastructure. Supporting and engineering responsibilities will include access to, and the handling of, confidential or sensitive data, materials, and enterprise information, involving all levels of the organization.

ESSENTIAL FUNCTIONS
• Monitors the physical and logical components of information systems and network security architectures for all technology environments including mainframe, server, desktop and mobile computing, as well as telecommunications, technical operations, and applications services.
• Provides direct feedback to the Director of IT Security or other officials regarding any/all concerns related to critical information and data security issues, policies and procedures, including recommendations and tentative plans for mitigation or resolution when applicable.
• Utilizes technologically advanced hardware and software tools to proactively monitor and analyze enterprise infrastructure in search of suspicious, malicious, illegal or fraudulent activity.
• Monitors compliance and assists in the implementation of security policies and procedures such as user authentication, security violation escalation, use of firewalls and encryption methodologies and overall handling, transfer and storage of data across the enterprise.
• Assists in the preparation of daily, weekly and monthly status reports on security matters in order to develop security risk analysis scenarios, metrics, mitigation strategies and response procedures.
• Assists in the enforcement of security policies and procedures by administering and monitoring data security profiles, reviewing security violation reports, investigating possible security exceptions and documenting security controls.
• Monitors vital technology security components including firewalls, gateways, filtering, intrusion detection, network access control, directory services, anti-virus and authentication services.
• Assists in the performance of audits and investigatory processes related to or in response to internal, external, or law-enforcement agency inquiries.
• Performs investigatory procedures involving computer workstations, end-user devices, enterprise servers, E-mail, Internet services, and electronic documents, including situations directly related to employee acceptable use and criminal violations.
• Responds as directed to law-enforcement or official agencies in the form of investigatory questioning, deposition or court testimony.
• Regularly monitors specialized, regional, national and global IT security agencies and services in order to keep apprised of current security threats and concerns.
• Assists in the management and oversight of network certificates and security related registrations.
• Manages various aspects of account administration for networks, systems and services including remote access, VPN and directory services.
• Assists in the monitoring, security and administration of enterprise wireless and WIFI networks.
• Assists in the response to internal, local, state or federal controls audits where information or data security is indicated.
• Assists in the engineering, implementation, management and administration of physical security strategies inclusive of access card, theft/intrusion, identity, and surveillance systems and services.
• Participates in the evaluation of products and/or procedures to enhance productivity and effectiveness of information security across the organization.
• Performs capacity and future growth planning of the enterprise security infrastructure, inclusive of hardware and software, to ensure a highly available, redundant, and adequate security environment at all times.
• Provides direct support and guidance to administrative and IT technical staff for security related issues.
• Educates IT and other District staff concerning security policies and provides guidance for internally developed/managed applications and systems as well as outsourced or application service provider engagements.
• Participates in the development and implementation of enterprise security strategies.
• Assists in the securing of enterprise networks, servers, and networking devices.
• Professionally and securely handles enterprise information, including confidential and sensitive data.
• Provides customer service and support at all levels of the organization.
• Maintains 24-hour per day, 7-day per week availability via mobile telephone or paging device(s) for response to emergency or related operational issues.
• Performs related work as required.

MINIMUM EDUCATION AND EXPERIENCE
Qualified candidates must have:

1a. Education equivalent to two years of college;
AND
1b. Four years of full-time, paid, professional technology experience with emphasis on information security, forensic investigatory processes and procedures, and the monitoring, analysis and auditing of IT security environments.
OR
2a. Education equivalent to two years of college;
AND
2b. Two years of full-time, paid, professional technology experience with emphasis on information security, forensic investigatory processes and procedures, and the monitoring, analysis and auditing of IT security environments;
AND
2c. Possession of an industry-recognized intermediate or advanced information technology security certification such as CompTIA Security+.
OR
3 Any equivalent combination of training and experience determined to be acceptable by the Office of Human Resources.

APPLICATION PROCEDURE
Interested applicants should email a current resume and cover letter detailing the extent to which they meet the above criteria to:
Kelly Aichele
Chief Information Office
Email: kaichele@philasd.org

Resumes must be received by close of business April 14th to be considered.