Profile Details

Job Description
The Security Engineer is responsible for implementing and monitoring systems and processes that are required to maintain website uptime. This position will be a key part of the network engineering team whose primary responsibilities include information security and network infrastructure administration. This is the perfect position for an individual who wants to be exposed to new and exciting technologies.

Responsibilities (including but not limited to):

Responsible for all aspects of information security across the enterprise and production site operation environments

Influence network policy by recommending standards, budget constraints and long-range objectives

Deploy, maintain and troubleshoot firewalls, intrusion detection, VPN appliances, vulnerability assessment tools, event and log analysis, security change tracking and other network security systems and devices

Coordinate with business and development teams to further integrate security into application and product designs

Investigate and deploy open-source and commercial tools to enhance security at Edmunds.com through better detection, correlation, review and response.

Responsible for creating policies and defining security processes following ITIL and industry best practices

Formulate the company's responses to incidents, security advisories and other operational issues

Manage process to identify and remediate issues proactively through regular vulnerability assessments, penetration testing, log parsing and other methods

Work to integrate information security best practices throughout the Operations and Development teams' efforts

Participate in rotating "on call" schedule with other members of the Operations team

Qualifications: This is a technical role requiring expert level network and systems administration skills.

5+ years combined experience in information security, production operations, an ISP, or similar environment in a network engineering or Unix system administration capacity

Strong troubleshooting skills and effective troubleshooting methods in assisting with identifying application issues and network troubles.

Experience designing, supporting and troubleshooting three tier architectures

Excellent interpersonal, analytical, organizational, problem-solving, written and verbal communication skills

Proven experience with auditing, risk and threat analysis, contingency planning, implementing security standards and methods

Extensive experience utilizing well-known open source security tools

Strong understanding of TCP/IP, Solaris and Linux, network/system intrusion techniques, firewalls, switches, routers and load balancers, packet sniffers, remote access methodologies and VPNs

Perl, PHP and/or shell scripting experience

BS in Computer Science or equivalent work experience

Experience with ITIL practices is a plus