Information Security Engineer II

It's fun to work in a company where people truly BELIEVE in what they're doing!

We're committed to bringing passion and customer focus to the business.

At Simmons Bank, the Security Engineering Team   is responsible for   the design, implementation, and maintenance of security solutions   to include,   but not limited to:   Identity   & Access Protection , Email Security, Network Security, Endpoint Protectio n, Data Protection   and   Vulnerability Management .   These security solutions secure   critical   business   operations and   protect our customers and data.  

 

You will join a team of Associates dedicated to ensuring the security of the corporate network and   be responsible for   the day-to-day operation of the Information Security Program .    

 

Level I I   Security Engineers are   primarily   responsible for the   implementation and maintenance of security systems and supporting   end-user s ’ use of   th e Company’s security services .   Level II Security Engineers   operate   with limited direct supervision and provide   mentoring of Level I Security Engineers.  

Essential Duties and Responsibilities

** Systems   Engineering **  

• Contributes   substantially   to   the design   and   implementation of   security   systems , as needed  

• Identifies   and documents system security requirements   to   assist   with   solution   selection  

• Assists   with the evaluation of   new   technologies   or   process   improvements   that enhance security capabilities  

• Serves as specialist for   certain   security systems, as assigned  

 

** System Administration **  

• Configure s ,   maintain s , and   m onitor s   the Company’s   security systems , including but not limited   to:   secure email gateway,   firewall , VPN,   network access control ,   secure   web gateway ,   security information and event management platform ,   endpoint protection ,   data loss   prevention   and vulnerability   scanning   tools  

• Supports Level I Security Engineers with service request and incident tickets, as needed  

• Supports Level I Security Engineers with system changes, as needed  

• Handles service request and incident tickets   pertaining to   security   systems  

• Reviews   system   alerts and responds   in accordance with   established procedures   ( e.g.   triage , mitigate, and escalate)  

• R esearches ,   tests and presents proposed security system changes to IT and Business leadershi p  

• Conducts security   system changes   in accordance   with   the change management process  

• Collaborates   with   external parties ( e.g.   vendor support,   professional   services   and other s)   to   maintain   security technologies    

• Monitors cases, tickets, and incidents opened with vendor support to ensure   timely   response and remediation  

• Applies upgrades, patches, and other configurations in support of the patch management and vulnerability management processes  

• Maintains   the team’s written   documentation ( e.g.   diagrams, procedures,   and other system information)   for   the Company’s   security systems   

 

** Administrative **  

• Participates in rotating on-call schedule   representing   the   Security Engineering   team  

• Mentors   other   team members and   supports   cross-training  

• Communicates security concerns to management   in a timely manner  

• Completes training related to this position, as assigned,   in a timely manner  

• Pursues IT and/or Security certifications relevant to this position  

• Takes initiative and responsibility for achieving desired results  

• Performs other duties as assigned  

Qualifications

** Education and/or Experience **      

• Minimum of   six   ( 6 ) years of experience in information technology, network   engineering , or security   engineering   (required)  

• Bachelor’s degree in a related field (preferred)  

• Direct experience   administering   security   systems   such as:   endpoint protection ,   network   access control , web content filtering, data loss prevention, vulnerability scanners, and firewalls ( required )  

• Experience   in   operational   roles   supporting   of   IT   systems , networks,   or application s   and   direct experience conducting   basic   troubleshooting   steps ,   documenting tickets, and   communicating with end-users (required)  

 

** Certifications **  

• CompTia   A+,   Security+, Network+, or other baseline security related certifications ( required )  

• CISSP, SSCP,   CEH , or other intermediate security related certifications (preferred)  

 

** Other Qualifications **   (including physical requirements)   

• Must be willing to periodically work non-standard hours and be on call  

• Intermediate   understanding of   common enterprise   operating systems , database systems , and   network s  

• Basic understanding of cloud computing architecture and   cloud services  

• Baseline knowledge of security technology landscape and emerging security technology  

• Working knowledge of Microsoft Windows operating systems for advanced   troubleshooting   techniques  

• Ability to read and interpret documents and follow written or verbal instructions  

• Ability to transform technical details and processes into written instructions,   playbooks   and procedures  

• Ability to conduct oral and written communication   and present , in a professional manner, to internal and external parties  

• Ability to prioritize assignments   while working on multiple projects  

• Ability to manage their own time with awareness to escalate issues promptly and with focused on meeting SLA targets  

• Ability to work independently with l imited supervision  

• Possesses service-oriented mindset and strong customer service skills  

 

Please   note   this job description is not designed to cover or   contain   a comprehensive listing of activities, duties or responsibilities that are   required of   the employee for this job .    Activities,   duties   and responsibilities may change at any time with or without notice .  

Equal Employment Opportunity Information: Simmons First National Corporation and its subsidiaries are committed to a policy of equal employment with respect to a person's race, color, religion, sex, ancestry, sexual orientation, gender identity, national origin, covered veterans, military status, physical or mental disability or any other legally protected classifications.