Security Engineer

Role: Security Engineer Location: New York, NY (100% onsite) Duration: Long term Rate: Market Key Responsibilities: Architect security controls Participate in the implementation of security controls in a Public Safety ESINET and NENA compliant NG911 system. Perform vulnerability management Troubleshoot level 3 security related issues Provide expertise in integration and engineering of Security platforms Perform security risk assessments of applications, infrastructure, and networks Ensure the National Emergency Number Association (NENA) and Association of Public Safety Communication Officials (APCO) standards are being met during the implementation of NG911. Lead Incident Management activities to monitor and resolve incidents. Perform root cause analysis. Ensure the security controls are adequate for all Public Safety Answering points (PSAPs) in the commission of the 911 program at PSAP. Develop security configuration of the ESINET Network Technology. Manage test cases and identify risks associated with the ESINET integration. Provide security best practices in PSAPs as well as review all vendor designs ensuring compliance with security standards and governance models established by the City of New York. Monitor security controls using tools for threat hunting Mandatory Qualifications: At least 12 years of experience in IT Security standards and architecture Minimum 3 years of experience in NG911 security related standards and architecture. Understanding of ESINET NENA i3 network design Understanding of NextGen911 functional elements and 911 call routing Desired Qualifications: Minimum 3 years of experience in NG911 security related standards and architecture Understanding of ESINET NENA i3 network design Understanding of NextGen911 functional elements and 911 call routing Understanding for firewall policies and application security Experience in auditing/assessing data network security design Experience in auditing/assessing applications security design Understanding of SIP security design and implementation for Voice/Video and Data Should be able to utilize security frameworks like NIST and MITRE Knowledge of resilient designs to ensure high availability