At Aimco, our mission is to consistently provide quality apartment homes in a respectful environment, delivered by a team of people who care.
In support of this mission objective, we are seeking an IT Security Engineer who will personally be responsible for reviewing security designs, implementing technical security controls, and designing security solutions which continue to propel Aimco’s vision.
The person in this integral role reports to the Vice President of IT Infrastructure will help implement the information security design for cloud usage throughout the enterprise, enforce compliance with security policies and controls and function as a technical security expert on various projects.
Among other duties, you would:
Work closely with functional-area architects, engineering, and security specialists throughout Aimco to ensure adequate security solutions and controls are in place throughout all IT systems, cloud systems and platforms to mitigate identified risks sufficiently, and to meet business objectives and regulatory requirements; Assess and understand Aimco’s current security posture and future architecture, providing a viable solution path to bridge the gap; Assess and understand the current and planned security posture for platforms (e.g.
servers, databases, web servers), providing recommendations for improvement and risk reduction; Interface effectively with the team to implement security solutions and controls; Design security configuration standards, procedures, and guidelines for platforms such as baseline security configurations and hardening guides;
Design and implement mechanisms for assessing compliance with the security standards, procedures, and guidelines; Identify and execute on opportunities to automate internal, cloud and platform security controls; Design and build controls to address security risks and events as identified;
Support security incident response as required; Research, design, and advocate new technologies and security products that will support security requirements for the company and its residents, business partners, and vendors; Contribute to the development and maintenance of the information security strategy; Analyze business impact and exposure, based on emerging security threats, vulnerabilities and risks; Communicate security risks and solutions to business partners and IT staff;
Recognize, adopt, and instill industry leading practices in security engineering throughout the organization; Embrace a culture of continuous service improvement and service excellence; and
Stay up to date on security industry trends.
You should have:
Strong experience with cloud security strategy, with a passion to make security realistic, achievable and interwoven with the business fabric;
Strong experience in migrating enterprise companies from traditional data center infrastructure, application and data designs to hybrid or fully-cloud enabled practices.
Strong experience with security in cloud provider ecosystems, including Microsoft Azure.
Strong experience with a broad range of security technologies, including NextGen Firewalls, DLP, NAC, IDS/ IPS, IdAM, Certificate Management, SIEM, Endpoint Protection, Anti-malware, vulnerability management;
Strong experience with logging and alerting platforms, including SIEM integration;
Some experience with relational database platforms such as MSSQL, Oracle and MySQL;
Some experience with Unix/Linux and Windows system administration;
Proven ability in security process and organizational design;
Current understanding of Industry trends and emerging threats; and
Knowledge of incident response methodologies and technologies.
Experience implementing security controls in a global enterprise IT environment;
Experience driving a culture of security awareness;
Experience administering network devices, databases, and/or web application servers; and
Professional IT Accreditations (CISSP, CISM, CCSA, CCSE, JNCIA, CCNA, CCIE Security).
Are you ready to make an impact? Apply today!