Sr Info Security Engineer

It’s a great time to join AAA The Auto Club Group!

JOIN THE TEAM COMMITTED TO DRIVING YOUR CAREER FORWARD

Job Type:

Job Description:

Position Description

Primary Duties and Responsibilities (details of the basic job functions):

Provides senior level support to the information security team and closely works with the other members of the team to develop and implement a comprehensive information security program, including defining security policies, processes and standards. Works with the IT department to select and deploy technical controls to meet specific security requirements and defines processes and standards to ensure that security configurations are maintained. Provides support and oversight to security standards to ensure boundary control, integrity of information and security monitoring technologies are reducing risk for ACG enterprise. Closely works with Directory of Enterprise Information Security and senior leadership teams to ensure security for ACG information.

Develops a common set of security tools/controls, defines operational parameters and analyzes tool output. Provides oversight to security staff on deploying tuning and running vulnerability scanning and penetration testing tools. Provides support to the coordination and remediation required by Audit and keeps current on existing and proposed security-standard-setting, state and federal legislation and regulations pertaining to information security.

Supervisory Responsibilities (briefly describe, if applicable, or indicate None):

none

Required Qualifications (these are the minimum requirements to qualify)

Education (include minimum education and any licensing/certifications):

• Bachelor and/or Masters degree in Computer Science, Information Systems, Business Administration and/or equivalent security certification (CISSP, SSCP, GIAC, CEH, etc).

Experience:

Extensive experience in/with:

• Reporting unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes.
• Assisting and training team members in the use of security tools, the preparation of security reports and the resolution of security issues.
• Developing and maintaining documentation for security systems and procedures.
• Responding to security incidents and resolving and/or escalating reported incidents as appropriate
• Monitoring system logs, SIEM, DLP tools and network traffic for unusual or suspicious activity and interprets these activity, making recommendations for resolution.
• Investigating and resolving security violations by providing post event analysis to illuminate the issues and possible solutions.
• Implementing and/or coordinating remediation required by audits, and document exceptions as necessary.
• Performing system and application vulnerability testing.
• Researching threats and vulnerabilities and where appropriate, taking action to mitigate these issues.
• Conducting penetration tests and vulnerability assessments on information systems and infrastructure.
• Supporting information security architectural requirements.
• Developing a common set of security tools defining operational parameters for their use and conducting reviews of tool output.
• Working with/mentoring less experienced staff on deploying, tuning and running vulnerability-scanning and penetration-testing tools.
• Providing second- and third-level support and analysis during and after a security incident.
• Participating in security investigations and compliance reviews, as requested by internal or external auditors.
• Maintaining an awareness of existing and proposed security-standard-setting groups, state and federal legislation and regulations pertaining to information security.
• Participating in the enterprise architecture (EA) community, and providing strategic guidance during the EA process.
• Researching, evaluating, designing, testing, recommending and planning the implementation of new or updated information security technologies.

Knowledge and Skills:

• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Mainstream operating systems [for example, Microsoft Windows and Red Hat Linux] and a wide range of security technologies, such as network security appliances, identity and access management (IAM) systems, anti-malware solutions, automated policy compliance tools, and desktop security tools.

• Network security technologies (e.g. SIEM, DLP, Firewalls, IDS, IPS, application proxies and routing and switching fundamentals
• Information security principles, including risk assessment and management, threat and vulnerability management, incident response, and identity and access management.
• Network infrastructure, including routers, switches, firewalls, and the associated TCP/IP network protocols and concepts.
• Regulatory requirements such as PCI, FFIEC and Gramm-Leach-Bliley Act
• Current systems' software, protocols and standards
• Excellent presentation, persuasion, written and interpersonal skills to include procedure and technical material, report/proposal preparation and oral presentation.

• Contribute and collaborate as a lead member of a team
• Work under stress in emergencies, with the flexibility to handle multiple high-pressure situations simultaneously
• Work proactively and independently

Preferred Qualifications​

How you will benefit:

• A competitive annual salary between $134,492.80 - $161,387.21
• ACG offers excellent and comprehensive benefits packages, including:
• Medical, dental and vision benefits
• 401k Match
• Paid parental leave and adoption assistance
• Paid Time Off (PTO), company paid holidays, CEO days, and floating holidays
• Paid volunteer day annually
• Tuition assistance program, professional certification reimbursement program and other professional development opportunities
• AAA Membership
• Discounts, perks, and rewards and much more

FLEX WORK IN WORK ENVIRONMENT

This position is currently able to work remotely from a home office location for day-to-day operations unless occasional travel for meetings, collaborative activities, or team building activities is specified by leadership. This is subject to change based on amendments and/or modifications to the ACG Flex Work policy.

Important Note:

ACG’s Compensation philosophy is to provide a market-competitive structure of fair, equitable and performance-based pay to attract and retain excellent talent that will enable ACG to meet its short and long-term goals. ACG utilizes a geographic pay differential as part of the base salary compensation program. Pay ranges outlined in this posting are based on the various ranges within the geographic areas which ACG operates. Salary at time of offer is determined based on these and other factors as associated with the job and job level.

The above statements describe the principle and essential functions, but not all functions that may be inherent in the job. This job requires the ability to perform duties contained in the job description for this position, including, but not limited to, the above requirements. Reasonable accommodations will be made for otherwise qualified applicants, as needed, to enable them to fulfil these requirements.

The Auto Club Group, and all of its affiliated companies, is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability or protected veteran status.

Who We Are

Become a part of something bigger.

The Auto Club Group (ACG) provides membership, travel, insurance, and financial service offerings to approximately 14+ million members and customers across 14 states and 2 U.S. territories through AAA, Meemic, and Fremont brands. ACG belongs to the national AAA federation and is the second largest AAA club in North America.

By continuing to invest in more advanced technology, pursuing innovative products, and hiring a highly skilled workforce, AAA continues to build upon its heritage of providing quality service and helping our members enjoy life’s journey through insurance, travel, financial services, and roadside assistance.

And when you join our team, one of the first things you’ll notice is that same, whole-hearted, enthusiastic advocacy for each other.

We have positions available for every walk of life! AAA prides itself on creating an inclusive and welcoming environment of diverse backgrounds, experiences, and viewpoints, realizing our differences make us stronger.

To learn more about AAA The Auto Club Group visit www.aaa.com

Important Note:

ACG’s Compensation philosophy is to provide a market-competitive structure of fair, equitable and performance-based pay to attract and retain excellent talent that will enable ACG to meet its short and long-term goals. ACG utilizes a geographic pay differential as part of the base salary compensation program. Pay ranges outlined in this posting are based on the various ranges within the geographic areas which ACG operates. Salary at time of offer is determined based on these and other factors as associated with the job and job level.

The above statements describe the principal and essential functions, but not all functions that may be inherent in the job. This job requires the ability to perform duties contained in the job description for this position, including, but not limited to, the above requirements. Reasonable accommodations will be made for otherwise qualified applicants, as needed, to enable them to fulfill these requirements.

The Auto Club Group, and all its affiliated companies, is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability or protected veteran status.

Regular and reliable attendance is essential for the function of this job.

AAA The Auto Club Group is committed to providing a safe workplace. Every applicant offered employment within The Auto Club Group will be required to consent to a background and drug screen based on the requirements of the position.