Senior Security Engineer

Company Overview:

Satcom Direct (SD) provides global connectivity solutions for business and general aviation, military, government, and land mobile services. Since 1997, SD has worked to solve the unsolvable and advance the technology of connectivity through our industry-leading hardware and flight operations software. Our company culture is based on innovation and creativity which allows our team members to thrive in a dynamic atmosphere. We are looking for people who are passionate about customer satisfaction and who excel in a constantly changing environment.

Satcom Direct offers a highly competitive benefits package. For our US based employees, the company covers the entire cost for an employee's health, dental, vision, disability, and life insurance, as well as contributing to a significant portion of the family premium. Our global headquarters offers an on-site gym staffed with personal trainers, a cafe, food trucks, social hour, and more. With an open vacation policy, employees have the flexibility to take time when they need it. SD is centrally located on the beautiful Space Coast in Viera, FL, which is one of the Top 50 Master-Planned Communities in the United States.

JOB SUMMARY:

The Senior Security Engineer is responsible for providing security leadership, architecture, application development, database, design, implementation and operational processes for the Corporate Information Security and Compliance Department (CISCD). This is achieved by planning, designing, and developing security best practices then implementing. In addition, the Senior Security Engineer will participate with the installation, monitoring, maintenance, support, and optimization of all security hardware, software, and communication systems and will serve as Tier 3 security support. This individual will also analyze and resolve security related problems in a timely and accurate fashion and provide end user training where required. As a result, the candidate must have a strong understanding of technology, security standards and industry best practices.

ESSENTIAL DUTIES/RESPONSIBILITIES:

The requirements listed below are representative of the fundamental knowledge, skill, and/or ability required to perform the job successfully:

• Serve as Information Security SME for business and IT Projects and Initiatives
• Support the system security design effort, security requirements analysis, and security requirements flow throughout the software development lifecycle
• Manage physical and logical security controls implemented throughout the enterprise
• Monitor networks and systems for security breaches, through the use of software security tools
• QA software and hardware for security vulnerabilities and risks
• Engineer solutions to automate security tasks and testing
• Design and support Identity and Access Management solutions for the enterprise
• Manage the Vulnerability Management program and remediation efforts
• Lead company awareness training on information security standards and policies
• Performs network penetration, web and mobile application testing, source code reviews, threat analysis, wireless network assessments, and social-engineering assessments
• Coordinate with security vendors for all work requiring third-party services
• Coordinates projects with internal stakeholders as required
• Participate in the security governance model, establishing policies, standards and best practices
• Participate in the incident management lifecycle, including escalation, communication, debugging, resolution, and problem management
• Participate in an on-call rotation for support of after-hours security issues
• Document security processes, procedures, and systems. Documents and creates reports to support business requirements.
• Document and escalate reporting of identified security risks and incidents to the CISO

To be successful in this role, an individual must be able to perform each essential duty in a satisfactory manner and should demonstrate all competencies listed above. All employees are expected to adhere to and be knowledgeable of SD operating standards, established safety rules, and adhere to company attendance guidelines.

GENERAL QUALIFICATIONS AND EXPERIECE:

• BS in Information Systems or Computer Science
• 8+ years of Information Technology experience
• Industry Certification: CISSP, CEH, OSCP or similar certification
• Knowledge of security frameworks such as NIST 800-53, 800-171, ISO 27000
• Strong organizational, technical, analytical, and problem-solving skills are required.
• Working knowledge of and experience with Vulnerability Scanners, SIEM, Access Systems, CCTV, Email Security Appliances, MFA system, AV/AM, IPS/IDS (NIPS/NIDS, HIPS/HIDS,), Network Access Controls (NAC), Ethical Hacking systems
• Knowledge of and experience with commercial and open source application security tools (e.g., Burp Suite, OWASP Zap, Arachni, Nikto, BlackDuck, Kali Linux, Metasploit framework, Wireshark)
• In-depth technical knowledge of techniques, standards and security for authentication, authorization, cloud, and web-related technologies (such as browsers, web applications, APIs, services, architectures etc.)
• Knowledge and experience in application technology security testing, including white box, black box, and code review
• Working knowledge of a variety of programming languages, with an emphasis on C#, Python, JavaScript and the ability to write code independently in select languages.

PHYSICAL DEMANDS:

While performing general office duties for this position, the employee is regularly required to sit, stand and/or walk around (including the use of stairs). Other demands include the ability to openly communicate with others by talking, listening and reading, able to lift light objects (< 25lbs), and use standard office equipment such as computer, printer, phone and cell phone. In addition, there is an occasional need to bend, twist or stoop in order to open/close cabinets, reach for files or other standard office type objects. An on-call rotation for support of after-hours security issues is required.

WORK ENVIRONMENT:

The office environment is generally quiet and, in a temperature, controlled setting with random adjustments in noise or temperature due to others talking or laughing loudly, unscheduled maintenance repairs to the building or its interior offices or unpredictable situations due to weather or other acts beyond company control. An employee must be willing to work their regularly assigned work schedule for their particular duties and/or job responsibilities and in times of need, be able to work an extended schedule depending on company/department needs, project requirements or customer demands. Some overnight travel is required to facilitate work objectives. While at client site locations, if applicable, employee will be required to adhere to the proper safety precautions established by the client while in proximity to their work area, flight-line or maintenance repair center; work may require some physical effort in the handling of light materials, boxes or equipment. The temperature at client locations can vary from controlled to variations off hot/cold when working, standing or walking in or near the flight-line or maintenance repair center.

If you are interested in applying for employment and need special assistance or an accommodation to apply for a posted position, contact our Human Resources department at (321) 777-3000

Satcom Direct is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status, and will not be discriminated against on the basis of disability.

In compliance with Colorado's Equal Pay for Equal Work Act, the salary range for this role in Colorado is $120,000-$150,000. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location. SD also offers a variety of benefits including: health and disability insurance, 401(k) match, flexible spending accounts, EAP, education assistance, parental leave, paid time off, and company-paid holidays. The specific programs and options available to an employee may vary depending on date of hire, experience level and location.