The Senior IT Security Engineer is responsible for providing engineering design, analysis, and support of the Chumash Enterprise’s security tools and technologies. 

This role and its function are part of the Information Technology shared services model.  A Team Member in a shared service structure, works within a dedicated business unit (including people, processes, and technologies) that is structured as a centralized point of service and is focused on defined business functions. These units typically serve multiple business groups enterprise wide, and typically have established Service Level Agreements.

• Researches, designs, and implements cyber security solutions for organization systems and products that comply with all applicable security policies and standards.
• Works with Information Technology (IT) and internal and external business partners to ensure that security is factored in the evaluation, selection, installation and configuration process of hardware and software.
• Analyzes and makes recommendations to improve network, system, and application architectures.
• Examines network, server, and application logs to determine trends and identify security incidents.
• Assists in the review and update of cyber security policies, architectures, and standards.
• Assists in responding to audits, penetration tests and vulnerability assessments.
• Trains, mentors, develops, coaches, resolves problems, provides open communication vehicles, and recommends disciplinary actions as appropriate the IT Security Analyst.
• Upholds a work environment that promotes teamwork, partnership, recognition, mutual respect, collaboration, while role modeling the company values, behaviors, and culture of One.Team.Chumash.
• Performs other duties as assigned.

• High School diploma or GED certificate.
• Bachelor’s degree in Computer Science, IT security/cybersecurity or equivalent work and educational experience.
• Five years of experience in IT security/cybersecurity.
• System Security Certified Professional (SSCP) highly desirable.
• Certified Ethical Hacker (CEH) highly desirable.
• Certified Information Systems Security Professional (CISSP) highly desirable.
• Technical expertise in network security knowledge, to include VPN, firewall, network monitoring, intrusion detection, web server security and wireless security, cloud, and the Internet of Things (IoT).
• Practical experience with database security, content filtering, vulnerability scanning and anti-malware.
• Proficiency with at least one scripting language (e.g., Perl, Python and PowerShell).
• Willingness to work flexible schedules in a 24/7 work environment.
• Must apply for, receive, and maintain a Gaming License from the Tribal Gaming Agency.
• Native American hiring preference applies.
• Quality Orientation: Setting high standards regarding his/her work and working environment and acting accordingly; developing quality standards, continuously evaluating performance, products, and procedures; actively seeking ways to improve quality.
• Strategic Thinking: Understands and processes complex information and exercises sound judgment, considering the situation, the issues, the key players, and the levels of authority involved. Proposes courses of action that further the objectives, priorities, and vision of the organization.
• Planning and Organizing: Setting priorities and defining actions, time, and resources needed to achieve predefined goals.
• Oral Communication: Shaping and expressing ideas and information in an effective manner.
• Written Communication: Expressing ideas and opinions clearly in properly structured, well organized, and grammatically correct reports or documents; utilizing language and terminology that is understandable for the reader.