Senior Cloud Systems Engineer - Cyber Security

Summary Statement:

You will be working with a team of experts to create solutions for all of Penske’s security needs.

What you will be doing:

As a Penske Senior Systems Engineer - Cyber Security you will define and promote security policies, and ensure associates follow these security standards through oversight of the set-up of a user’s security access, administer network security access and monitor the associate’s use of data systems to safeguard company information. You will be involved in recommending security products and analyzing their performance within a team of experts. You will also manage the security projects and/or solution implementations to client group expectations.

Penske Responsibilities:

• Define and promote security policies, and ensure associates follow these security standards through oversight of the set-up of a user’s security access, administer network security access and monitor the associate’s use of data systems to safeguard company information.
• Provide security reviews and define security models for new systems.
• Analyze and recommend security products based on their performance
• Maintain network, server and workstation firewall protection and provide network and application scanning, security logging, and intrusion detection capabilities
• Audit access to mission critical applications and to maintain compliance documentation for SOX and PCI. Analyze and review annual SOX and other compliance reports.
• Collaborate with different teams within the IT department to discuss, analyze, or resolve usability issues, and work on projects to update or create new security infrastructures.
• Work on 1-3 large-scale and cross-functional projects concurrently, assigned from department and group senior leadership.
• Mentor Security Engineers and Administrators and Offshore Contractors.
• Responsible to analyze and review annual SOX and other compliance reports
• Analyze data to identify exceptions, last usage, and necessity of access for computer applications and systems
• Modify computer security files to incorporate new software, correct errors, or change individual access status.
• Encrypt data transmissions and configure/maintain firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers
• Involved in designing and maintaining intrusion detection processes and infrastructure.
• Testing and documentation of computer security and emergency measures policies, and procedures

Penske Qualifications:

• Bachelor’s degree or equivalent experience required, advanced degrees or certifications preferred
• 6+ years of functional experience
• At least 6+ years of experience and advanced knowledge in the following systems/languages:
• Firewall software/hardware (e.g. Cisco ASA and Palo Alto).
• Proxy Filtering (e.g. Blue Coat Proxy).
• Centralized Log configuration and analysis(e.g. Splunk).
• IDS/IPS configuration and analysis.
• SSO Infrastructure (e.g. CA SiteMinder, LDAP and RSA IdM). Network Vulnerability Scanning (e.g. Nessus/Tenable).
• Advanced User Authentication Structures (e.g. Cisco ACS and RSA ACE servers).
• OS Hardening and Security: IBM i, Linux, Mac, Windows.
• Application vulnerability scanning.
• Networking TCP/IP and packet capture applications such as tcpdump and WireShark.
• Endpoint Protection solutions ( e.g. CrowdStrike and McAfee).
• Encryption Technology.
• SOX, PCI Requirements and Auditing.
• 1-2 years of project management (including mid-to-large scale projects, and managing multiple projects at one time)
• IT Security Certification such as the CISSP (Certified Information Systems Security Professional) or the CISM (Certified Information Security Manager)
• Regular, predictable, full attendance is an essential function of the job.
• Willingness to travel as necessary, work the required schedule, work at the specific location required, complete Penske employment application, submit to a background investigation (to include past employment, education, and criminal history) and drug screening are required.

EEO Statement

Penske is an Equal Opportunity Employer.

Physical Requirements:

• The physical demands described here are representative of those that must be met by an associate to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
• The associate must regularly lift and /or move up to 25lbs/12kg.
• Specific vision abilities required by this job include Close vision, Distance vision, Peripheral vision, Depth perception and Ability to adjust focus.
• While performing the duties of this Job, the associate is regularly required to stand; walk; sit and talk or hear. The associate is frequently required to use hands to finger, handle, or feel and reach with hands and arms.