Internet Storm Center

Job Description

At Regions, the Network Security Engineer is responsible for the day-to-day maintenance and operation of Information Security systems to ensure controls are adequate and effective. This engineer should be capable of analyzing scenarios, recommending solutions, and implementing controls to protect the environment, customers, and employees.

Primary Responsibilities

Utilizes Subject Matter Expert knowledge in leading daily management and administration of network security controls such as firewalls, web application firewalls, DNS, routers, switches, VPN appliances, and load balancers
Utilizes an advanced and broad range of skills to identify and troubleshoot different technical platforms including firewalls, servers, networks, Internet and Cloud
Creates and maintains knowledge base to aid troubleshooting used by support teams
Evaluates existing processes and policies and recommends enhancements to protect data and information from unauthorized access
Investigates intrusion incidents, conducts forensic investigations, and mounts incident responses
Proactively identifies and evaluates new technologies and processes that enhance security capabilities and makes recommendations to management
Establishes plans and protocols to protect data and information systems against unauthorized access, modification, and/or destruction
Delivers technical reports on activities to varying audiences
Maintains knowledge with current emerging technologies and advancements within Information Security
Takes initiative and responsibility for achieving desired results and influencing team success
Participates in on-call rotation
Works with management to ensure documentation procedures are in place for all changes on all equipment as required by Audit
This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay.

Requirements

High School Diploma or GED and ten (10) years of related post-secondary education and/or experience in Information Security or Information Technology
Subject Matter Expert (SME) in one or more security domains
Preferences

Bachelor’s degree in Computer Science, Management Information Systems or related field
Applicable industry certifications including those from Cisco, Palo Alto Networks, AWS, GIAC, etc.
Experience with Cisco CCNP Data Center / Security
Experience with Palo Alto Networks PCNSA / PCNSE / PCCSE
Experience designing and administering an enterprise network that supports multiple physical and cloud data centers
Skills and Competencies

Advanced ability to articulate complex technical concepts or scenarios to both technical and non-technical audiences
Advanced research, analytical, and/or problem-solving skills for evaluating situations, making recommendations, and taking effective action
Advanced verbal, written communication, and organizational skills
5 years in Cyber Security experience
2 years Unix/Linux server administration
2 years experience managing Intrusion Detection Systems
2 years experience writing custom IDS Signatures
2 years experience analyzing network traffic (tcpdump, wireshark, pcap files)
Knowledgeable in bash and python scripting
SANS GCIA Certification (GCIA, GSEC)