The Information Security Engineer 5 is a master level, professional role that is the seasoned security technical leader for the organization. This role positively influences colleagues beyond the Information Security Division and regularly contributes to the strategic vision of Information Security practices of ICS and the organization. This position works to improve and maintain security infrastructure, employ industry best practices and follow Church policies. This position assists the business in defining objectives, processes and measurements. This person evaluates and selects methods and techniques for designing, defining, developing, testing, implementing and analyzing a variety of technical products and systems. This role ensures that information security controls are properly implemented, monitored and maintained to protect organizational data and systems. This position will lead complex technical investigations and projects as part of a 24/7 global enterprise Security Operations Center program. Responsibilities include incident response, digital forensics, cloud and other emerging technologies, and response process development.

The role is open to US-based eligible candidates and can be performed fully remote in the United States.

This individual works with divine guidance to provide or support technology that furthers the mission of the Church and reflects the eternal impact of the gospel. Employment in this role requires temple-worthy membership in The Church of Jesus Christ of Latter-day Saints.

• Function as the primary engineer to lead efforts such as incident response, digital forensics, and integration/automation
• Lead high-profile or high-risk projects, incidents or investigations that may include consultations with affiliated Church entities
• Direct the development of standard practices and tools within areas of expertise
• Oversee and mentor junior Information Security Engineers and/or interns
• Provide seasoned leadership in security services and operations
• Implement tools, processes and communications that support information security initiatives
• Participate in the development and refinement of Information Security programs
• Develop and maintain documentation for security systems and procedures
• Participate in the evaluation, selection, testing and implementation of security-focused products and services
• Lead in tactical projects as they arise to clarify and respond to identified security risks across technical domains
• Lead the effort to define business objectives, operational parameters, success metrics and process documentation for a security program
• Execute established security practices with consistency and discipline and continually look for ways to improve practices
• Collaborate with engineers in other groups to implement standardized practices and follow routine process to promote secure systems
• Investigate and correct new or unusual security configurations and implementations as identified by intelligence, analysts or monitoring

Practical, relevant experience and/or applicable skills in emerging technologies will be given strong consideration and may substitute for years of formal education. Skills testing and project experience may be used for evaluation purposes.

Education:

• Bachelor's degree in related field or equivalent professional experience

Experience:

• 10+ years experience in security, privacy, business continuity, compliance or related area;
  • 4+ of the following provable expertise and skills in the following areas: attacker tactics for both enterprise and web systems, incident handling, Continuous Monitoring, Intrusion detection, advanced. Network Forensics, and Incident Response, Host Forensics and Malware
    

• Excellent professional written and oral communication skills
• Proven ability to effectively and appropriately exert indirect influence across workgroups or business units
• Proven ability to appropriately weigh competing interests of security standards and policies against business and operational needs in the design and implementation of security controls
• Ability to successfully work on a team
• Significant expertise in two or more domains of information security
• This job operates in a professional office environment
• To successfully perform the essential functions of the job there may be physical requirements which need to be met such as sitting for long periods of time and using computer monitors/equipment
• Familiarity with programming and scripting

Preferred:

• Relevant security certification from one or more of the following or equivalent certifying authorities: GIAC, CompTIA, ISC2, EC-Council, etc.

#LI-DS1