Security Engineer

Job Description – add details here Description: The successful candidate will be working with IT, industrial internet of things (IoT) and operational technology teams to lead technology driven business process transformation and innovation for Navy Federal Credit Union. They will partner with IT, Risk, Security and Audit teams to establish operational compliance that streamlines operations while protecting the organization The ideal candidate will serve as a subject matter expert for Physical Security Surveillance systems using Avigilon Unity Cloud Solution having strong cyber/device security and network engineering skills. This candidate will work closely with the team to understand connected devices/internet of things in depth and to document the product details including the security architecture, trust boundaries and data flows. They will provide product security related coaching/mentoring and security expertise for all IoT device teams. Responsibilities: Professional understanding of the essential requirements of IoT architecture, scalability, real-time capability, data protection and securityIdentify security risk in Navy Federal’s IoT device ecosystem and communicate those risks to management and assist with the mitigation effortsOversee and manage the deployment, integration and configuration of security solutions and any enhancements to existing IoT security solutions and the enterprise's security documentsPerform security research, analysis, and testing via threat modeling, vulnerability assessment, penetration testing, and/or social engineering across a wide variety of applications, platforms and systemsWork with Industry solution providers, equipment manufacturers, and the Enterprise Resource Planning vendor to design and implement the required systems integrations points and data flow to achieve best in class lights-out-operationsPartner with sensors specialists to manage new sensors data streaming to IoT platform, and with data scientists and machine learning engineers to take on analytic results and develop it to an application with user interface, integrate with any pre-existing systems, demonstrate successful use cases and wins, etc.Understand systems flow, data source, data usage and technical requirements clearly, to meet the functionalities per user requirementsAccountable for the improvement and delivery of the applications geared towards the industrial communications and data collection Qualifications: Experience with Surveillance Systems, Cyber Security and Network SecurityExperience with configuring and designing segmented networkingKnowledge of TCP/IP, HTTP, UDP, and XMLKnowledge of IoT software platforms such as ORDR, ARMIS, Azure IoT or Cisco IoT HubProven ability to work creatively and analytically in a problem-solving environmentFamiliarity with OT environment security with risk-based management, vulnerabilities, asset and threat protection, security behavioral analytics, and security environmental configurationNote: All the considerations above should be addressed in platforms to include Cloud, On-Prem, Hybrid, with various operating systemsMinimum 7 years of Information Security and Physical Security ExperienceMinimum of 5 years of Industrial Internet of things experience including rapid design, prototyping and deployment of embedded systemsExperience with communicating and data collection from systems such as sensors, controllers, and industrial systemsAble to articulate and present IoT concepts to senior managementExperience in Industrial environment is an assetExperience with PLC, DCS and SCADA is an assetProven success in contributing to a team-oriented environmentAbility to align and influence critical stakeholdersStrong supporter of customer centricity. Understands the importance of demonstrating concern for satisfying customers. Passionate about developing goals to improve customer experienceRetain and convey a positive attitude in challenging circumstances