Security Engineer for ITS Security - LA METRO

Project Description:

This project entails providing cybersecurity staff augmentation services to Metro's Information Security Department for two years. The assigned resource will support various core functions within the department, focusing on enhancing security strategy, governance, risk assessments, and security operations. Flexibility in work schedules and locations is required. The project aims to bolster Metro's cybersecurity posture and adherence to industry best practices in the transportation sector.

Key qualifications:

• Proficiency in Windows and Linux operating systems and their security aspects.
• Expertise in a wide range of security products, including modern solutions like cloud security, Zero Trust architectures, advanced threat protection, and AI-Driven security analytics.
• Deep understanding of Incident Response, Disaster Recovery, Business Continuity, and Breach Management.
• Knowledge of information systems engineering, secure software development, networks security, and security operations.
• Familiarity with security standards and framework suck as PCI DSS, ISO Standards, ITIL, NIST Cybersecurity Framework, CCPA, CPRA, and GDPR.
• Ability to review and create security procedures and requirements.
• In-depth knowledge of industry frameworks like ISO 27000, NIST 800-53, ITIL Foundation, and NIST Cybersecurity.
• Strong grasp of regulatory compliance requirements, including PCI DSS, HIPAA, GDPR, etc.
• Comprehensive knowledge of security risk and countermeasures for Windows and Linux platforms.
• Project Management skills and coordination capabilities.
• Experience in Public Transportation or Transit Industries preferred.

Skills & Qualifications:

• Required CISSP
• Preferred Certifications: Microsoft Certification Azure Solutions Architect Expert, SANS GIAC, CEH-CCNA.
• Minimum ten (10) years of experience in cybersecurity, primarily focused on technical and Security Operations Center (SOC) functions.
• Expertise in User Behavior Analytics, Cybersecurity AI tools, SIEM, Endpoint Security, NextGen Firewalls, etc.
• Advanced knowledge of security applications, infrastructure, technologies, and methodologies.
• Up-to-Date understanding of the latest security advisories, alerts, and vulnerabilities relevant to Metro.
• Initiative and independent judgement within established guidelines.
• Ability to prioritize work processes and project effectively.
• Timely response to cybersecurity issues and incidents.

Hybrid position: 30% home & 70% On Site

Salary Range: $156,000 to $238,000 /Year