Senior Systems Engineer - Cyber Security

Senior Systems Engineer – Cyber Security

Summary Statement: 

You will be working with a team of experts to create solutions for all of Penske’s security needs.  

What you will be doing: 

As a Penske Senior Systems Engineer – Cyber Security you will define and promote security policies, and ensure associates follow these security standards through oversight of the set-up of a user’s security access, administer network security access and monitor the associate’s use of data systems to safeguard company information. You will be involved in recommending security products and analyzing their performance within a team of experts. You will also manage the security projects and/or solution implementations to client group expectations.  

Penske Responsibilities: 

• Define and promote security policies, and ensure associates follow these security standards through oversight of the set-up of a user’s security access, administer network security access and monitor the associate’s use of data systems to safeguard company information.  

• Provide security reviews and define security models for new systems.  

• Analyze and recommend security products based on their performance

• Maintain network, server and workstation firewall protection and provide network and application scanning, security logging, and intrusion detection capabilities

• Audit access to mission critical applications and to maintain compliance documentation for SOX and PCI.  Analyze and review annual SOX and other compliance reports.

• Collaborate with different teams within the IT department to discuss, analyze, or resolve usability issues, and work on projects to update or create new security infrastructures.   

• Work on 1-3 large-scale and cross-functional projects concurrently, assigned from department and group senior leadership.  

• Mentor Security Engineers and Administrators and Offshore Contractors.   

• Responsible to analyze and review annual SOX and other compliance reports

• Analyze data to identify exceptions, last usage, and necessity of access for computer applications and systems

• Modify computer security files to incorporate new software, correct errors, or change individual access status.

• Encrypt data transmissions and configure/maintain firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers

• Involved in designing and maintaining intrusion detection processes and infrastructure.

• Testing and documentation of computer security and emergency measures policies, and procedures