Senior IT Security Engineer

The role of a Senior IT Security Engineer revolves around designing, implementing, and managing security measures to protect an ODE’s systems and data from cyber threats and assisting in enhancing and overseeing ODE’s information technology security program.

1. Supporting in day-to-day security operations, including monitoring security events, investigating incidents, and implementing security controls. Collaborating with the IT security team to ensure the effective functioning of security systems and tools.

2. Responsible for the implementation, and maintenance of security infrastructure, systems, and tools. This includes firewalls, intrusion detection/prevention systems, data loss prevention systems, secure network architectures, and other security technologies.

3. Conduct vulnerability assessments and penetration testing to identify weaknesses and vulnerabilities in the organization's systems and networks. Handling the remediation of identified vulnerabilities and ensuring systems are patched and up to date. 4. Developing and implementing incident response plans and procedures. Maintaining accurate records of security incidents, investigations, and remediation activities.

5. Assisting in developing and delivering IT security awareness and training programs for employees.

6. Maintaining security monitoring systems and tools, such as Security Information and Event Management (SIEM) platforms, to detect and respond to security incidents.

7. Contributing to the development, implementation, and enforcement of security policies, standards, and guidelines. Keeping up to date with changes in security requirements and best practices.

8. Conducting cyber security assessments and providing recommendations to mitigate identified risks. Collaborating with cross-functional teams to implement risk management strategies and controls.

9. Staying up to date with the latest cybersecurity threats, attack techniques, and emerging technologies. Conducting research and analysis to understand new threats and recommending proactive security measures.