Information Security Engineer

It's fun to work in a company where people truly BELIEVE in what they're doing!

We're committed to bringing passion and customer focus to the business.

The Information Security Engineer is responsible for contributing to the corporate Information Security program by assisting in the identification, recommendation and implementation of industry leading application security tools and techniques. The incumbent will also maintain and update application security processes and procedures and train team members on any relevant updates.

Essential Functions

• Assist with the development, implementation, and administration of information security policies, standards, and procedures, adhering to industry best practices
• Assist in integrating regulatory compliance requirements (e.g., PCI, GLBA) into the organizational security roadmap
• Assist in ensuring that the corporate IT environment is secure and complies with all external audit requirements and federal standards
• Coordinate with IT Operations to ensure endpoints and network devices conform to security standards, and that security devices and controls are working as designed
• Assist in the identification, evaluation and implementation of industry leading application security tools and techniques
• Plan, coordinate, and implement security measures to regulate access to computer data files and prevent unauthorized modification, destruction, or disclosure of information
• Perform risk assessments and execute system tests to ensure proper functioning of data processing activities and security measures
• Identify potential security risks, and define and document remediation options or mitigating controls
• Perform security incident investigations including: chain of custody, containment measures, root cause analysis, and identification of preventive measures
• Define and assist in the management of an Incident Response Team that addresses potential or in-progress security events, establishing and adhering to escalation procedures and response times
• Perform information systems evidence gathering, to support e-discovery requests and messaging searches
• Perform security reviews on requests for new commercial software or material configuration changes to existing software
• Perform periodic internal IT security audit functions on IT operational controls, to include system access controls, firewall rule reviews, etc.
• Participate in on-call rotation
• Perform related duties as requested

Essential Knowledge, Skills, & Abilities

• Excellent written and verbal communication skills required
• Solid presentation skills
• Significant knowledge of security-oriented regulatory requirements and compliance
• Excellent familiarity with IT security principles and practices including firewalling, hardening, data loss prevention, threat prevention, and identity management.
• Ability to provide technical guidance to less experienced team members
• Knowledge of the mortgage industry is helpful, but not required
• Commitment and ability to cultivate a diverse and inclusive work environment.

Education

• Bachelor's degree in computer science, Engineering, Information Systems Security or a related field is required.
• Security class certifications strongly preferred
• Azure certifications preferred
• CISSP license preferred

Experience

• 5+ years of related IT experience required
• 2+ years in an Information Security engineering role
• 3+ years of experience in a regulated IT environment including some combination of SOX, HIPAA, GLBA, PCI preferred

Compensation and Benefits

• Covius offers an extensive benefits package for all employees, including medical, dental, vision and 401(k)!
• Compensation: $96,000 to $120,000 annually with a 10% AIP opportunity

Application Guidelines:

For best consideration, please submit your resume and application materials by DATE. Review of applications will begin immediately.

Working Conditions

Work is performed in a climate controlled indoor administrative office setting. The noise level in the work environment is usually quiet to moderate, depending upon the office or meeting location.

Physical Demands and Activities

While performing the duties of this job, the employee is frequently required to communicate. The employee frequently is required to remain stationary. The employee is frequently required to move about the office, operate a computer and other office machinery, such as calculator, copy machine, and computer printer; rarely position self to maintain files; rarely moves boxes weighing up to 10 lbs. Close and distance observation required with the ability to observe objects at close range in presence of glare or bright lighting (e.g., computer screen). Must possess the ability to communicate information and ideas so others will understand and have the ability to interact with external and internal stakeholders.

Covius is committed to equal opportunity in all employment practices to all qualified applicants and employees without regard to race, color, religion, gender, gender identity, age, national origin, pregnancy, disability, genetics, marital status, military or veteran status or any other protected category as established by local, state, and federal law. This policy applies to all aspects of the employment relationship including recruitment and hiring, placement, promotion, transfer, compensation, disciplinary action, layoff, leaves of absence, training, and termination. All such employment decisions will be made without unlawful discrimination based on any prohibited basis.

The essential functions, working conditions and physical demands described above are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position.

Please note that all job descriptions are not intended to be all-inclusive. This job description is not designed to cover all activities, duties or responsibilities that are required of the employee for this job. Employees may be required to perform other duties at any time with or without notice to meet the ongoing needs of the organization.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!