Security Engineer Full-Time NEW

The following statements represent what Boston Mutual stands “FOR” – it is what makes us different and better in the market we serve.

• We are FOR being a progressive life insurance company offering financial peace of mind to working Americans and their families.
• We are FOR providing practical and affordable products designed for those we serve.
• We are FOR making it easy to secure a level of financial protection with a portfolio of products – beginning with life insurance.
• We are FOR providing a personalized customer experience to our policyholders and producers.
• We are FOR acting in the best interests of our policyholders, producers, employees and the communities in which we live and serve – representing the goodness of mutuality in all we do.

We do our best to:

• Demonstrate a desire to assist
• Listen for understanding and respond empathetically
• Explain things in a manner that is easy to understand
• Be knowledgeable students of our business
• Take full ownership to resolve questions and issues
• Be professional, polite, and courteous
• Leave our customers and associates “better than where we found them”

The Security Engineer is responsible for working with their Security (Cyber) Teammates to assess, monitor, and execute security measures to help protect Boston Mutual from security breaches and attacks on its computer network systems. They will be responsible for ensuring that all technology platforms and applications are well protected and updated with the latest safeguards. The Security teammates will also be responsible for completing various tests, researching latest attacks, testing new software, implementing regulations, and any other processes to ensure the network’s security. The position resides in the Infrastructure and Security group, which is responsible for the management, administration, operation, and compliance of technology platforms and applications.

The Security Engineer is expected to complete all Cyber Security responsibilities which include but are not limited to:

• Monitor the organization’s networks and systems to identify any violations or breaches.
• Monitor software and current user status to protect networks and organizational information.
• Carry out regular cyber security tests to simulate attacks.
• Installing and using software, such as firewalls and data encryption programs, to help protect the company’s data and sensitive information.
• Assist in developing standards and processes that promote the company’s security policies.
• Maintain and operate cyber systems to identify, detect, protect, respond, and recover from cyber threats and incidents.
• Assist in the development and implementation of all policies and procedures relating to Cyber and Network Security.
• Prepare and create regular cyber reports of current state and recommend remediation strategies and solutions.
• Assist in the development and assessment of targeted metrics to assess security performance.
• Provides subject matter expertise and cyber security perspective in assisting in the development, implementation and testing of the enterprise disaster recovery and business continuity plan.
• Research the latest cyber security trends and software to prevent current or upcoming threats.
• Train users about security threats and how they can improve security.
• Maintain and review current software white and blacklists.
• Maintain strict confidentiality in all aspects of staff and business information.

Qualifications

Education:

• Bachelor’s Degree in Computer Science, Information Science (Systems) or Information Assurance.

Experience:

• 7 years' experience or equivalent combination of education and experience.

Knowledge Requirements:

• Knowledge of Cyber security controls including NIST frameworks and guidelines for Cyber Security.
• Knowledge of information security risk management.
• Knowledge of NAC and Zero Trust.
• Working knowledge of the Cisco platform with an emphasis on Firepower Devices Working knowledge of the Cisco Endpoint Products such as ISE and Umbrella.
• Working Knowledge on Microsoft Intune.
• Proficiency with various methods of reconnaissance, information gathering including network analysis, web application analysis, database analysis.
• Proficiency with various methods of threat modeling and vulnerability assessment including vulnerability scanners, password crackers, network protocol attacks.
• Competent technical skills and solid understanding of systems management, networking, and multiple security technologies and concepts.
• Critical thinker with excellent attention to detail.
• Demonstrated effective problem-solving skills.
• Excellent written communication skills with an ability to produce and maintain technical documentation.

Certifications/Licensures:

• CCNP or CCIE preferred
• CompTIA Security+ preferred
• CCNA
• Network+
• CISSP

Due to the COVID-19 pandemic, the majority of Boston Mutual's associates are currently working remotely in accordance with our safety protocols. The selected candidate will be expected to temporarily work remotely for an unspecified period of time as determined in Boston Mutual's sole discretion. When normal business operations resume, the selected candidate will be expected to physically return to work in the office – if possible. We returned to the office in May 2022, employees are required to be in office on Mondays and Thursdays at this time. This may change in 2023. There may be times in which employees are requested to come on site more days during the week based on business need.

Boston Mutual is an equal opportunity employer. Boston Mutual is an equal opportunity employer, and does not discriminate on the basis of race, color, age, religious creed, national origin, ancestry, sex, sexual orientation, gender identity, genetic information, disability, military service, veteran status, family status, pregnancy, or any other characteristic protected by federal or state laws. Boston Mutual is a drug-free workplace, and any offer extended will be contingent upon appropriate results of a drug test.