Network Security Engineer
Concord, CA

Job Description

Summary:

The Network & Security Engineer will leverage BevMo!'s IT infrastructure to generate new solutions to respond to challenges in a rapidly changing environment. The position supports the organization as a subject matter expert in IT, cloud technologies, networks, engineering, and information security. The Network & Security Engineer will plan, design, optimize, implement, audit, and troubleshoot operational systems. The position is responsible for recommending and developing network solutions as well as security solutions that protect BevMo! from cybersecurity threats, infiltration, and natural disasters.

Key Roles and Responsibilities:

* Collaborate with key internal stakeholders and vendors
* Maintain LAN/WAN architecture per business requirements.
* Maintain SOPs for BevMo! networks
* Maintain ISSM policies (Information System Security Management)
* Support retail POS/PCI standards and annual Report on Compliance (ROC) Audits
* Develop and maintain technical compliance policies, procedures, documentation, and standards
* Oversee management of user access, rights, and system privileges
* Implement, analyze, and report on various security program alerts
* Monitor and track vulnerabilities to avert potential threats
* Conduct regular security analysis and present findings to IT Leadership
* Oversee virus detection systems (ESET, email vulnerabilities platforms, virtual private network, firewalls, and other network gateways)
* Investigate security breach alerts, intrusion and hacking incidents, collect incident details and support forensic investigations
* Lead corporate communications and contingency plan in the event of a security incident
* Research and implement regulatory systems in accordance with IT security
* Support and monitor IT security in both the retail and corporate environments

Retail Environment

* NCR Advanced Checkout 7
* NCR Connected Payments
* In-store systems (mobile devices- Apple and Zebra)
* In-store Robotics
* E-Commerce - AWS/EC2 (Freshop)

Corporate Environment

* Cloud (Rackspace, Teradata IntelliCloud, Office 365)
* On-premise (IBM P9, HP Servers + VMWare, Cisco Unified Communications, Hughes, Networks SD/WAN, AirWatch - device management, FireEye/Mandiant, ProofPoint)

Requirements

Skills Required:

* Excellent communication skills - both verbal and written
* Exceptional collaboration skills and proven ability to work effectively cross-functionally
* Ability to operate in a rapidly changing environment
* Strong problem-solving and decision-making skills
* Demonstrate a thorough understanding of current security systems, intrusion detection systems, firewalls, anti-virus software, log management, authentication system, and content filtering, as well as various web-related terminologies and software

Education & Experience:

* 5+ years of experience as a network engineer or network security engineer
* Bachelor's degree in network engineering, telecom engineering, computer science, cybersecurity, related IT field, or equivalent work experience
* Certification(s) in networking engineer, such as Cisco Certified Network Professional Security (CCNP), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), or GIAC Security Certifications
* Experience with the following systems (or equivalent) required:
* POS and payment security (ex. NCR Retail Systems - ACS 7/AMS, NCR Connected Payments)
* Verifone payment platforms
* Cisco Unified Communications
* First Data Payment and gift card platforms
* Microsoft Office 365
* Hughes Network systems/WAN's
* Experience with Teradata and FireEye is preferred