Senior Information Security Engineer

Who we are…

Verra Mobility is a global leader in smart mobility. A combination of the global capabilities and talents of American Traffic Solutions (ATS), Highway Toll Administration (HTA), and Euro Parking Collection (EPC), the company develops technology-enabled solutions that help the world move safely and easily. Verra Mobility fosters the development of safe cities, working with police departments and municipalities by operating more than 4,000 red-light, speed, and school bus stop arm safety cameras in more than 200 jurisdictions across North America. The company also creates smart roadways, serving the world's largest commercial fleets and rental car companies to manage tolling transactions and violations for more than 8.5 million vehicles. Verra Mobility is a leading provider of connected systems, processing nearly 165 million transactions each year through connectivity with more than 50 individual tolling authorities and more than 400 issuing authorities. Arizona-based Verra Mobility Corp. currently operates in 15 countries and in 22 languages.

Focused on solutions that help the world move safely and easily, Verra Mobility builds safe cities, smart roadways, and the connected systems that tie them together. The company is constantly looking toward the future, ensuring it creates relevant solutions today that will work tomorrow. Seeking to understand new customers, regions, and businesses that will shape tomorrow’s smart mobility experiences, Verra Mobility strives to ensure more people around the world reach their destination safely and easily. Keeping its core principles front and center, Verra Mobility is fueled by relationships, driven by impact, guided by what’s right, and energized by what’s next.

Culture

Verra Mobility Corporation is a rapidly-growing, entrepreneurial company that operates with a people-first philosophy and approach. The company lives by its core values—Do What’s Right, Lead with Grace, Win Together, and Own It—in everything it does for its customers and team members. The company seeks to grow aggressively, both organically and through acquisition, to continue to be the undisputed market leader with these five core competencies: bias for action, customer focus, teamwork, drive for results, and commitment to excellence.

Position Overview:

The Senior Information Security Engineer will be responsible for the design, installation, administration, operational maintenance and issue troubleshooting of information security tools and system infrastructure across the organization.

This position is additionally responsible for developing and implementing network security strategies as well as monitoring and verifying that the network is appropriately protected from internal and external threats while enabling the business to work effectively and productively. This position evaluates the risk verses the business value to make appropriate risk mitigation recommendations to management.

Additionally, the Security Engineer will act as a subject matter expert on all information security owned infrastructure and systems, provide training on these systems as required and support the rest of the Information Security team members in their respective roles and duties as determined by 

This position is seen as a liaison into Verra’s security practices.

 Essential Responsibilities:

• Leverage prior work experience and industry best practices to ensure the security solutions are full utilized to their fullest capabilities.
• Provide solutions to complex problems either through processes or technology.
• Research and provide design reviews, configuration improvements, hardening suggestions and upgrade recommendations to Information Security team management.
• Lead proof of concept efforts of new security technology solutions while working closely with established vendors and resellers. Implement and test new security technologies deployed to safeguard access to resources, enterprise networks and computer systems as directed by the Director of Information Security.
• Monitor vendor and third-party security reports/lists and proactively patch vulnerabilities on information security owned tools and infrastructure.
• Participate in security incident response procedures as outlined in the company security incident response plan.
• Create and maintain internal documentation such as network, architectural and data flow diagrams and internal procedures for all information security owned products and tools.
• Train the security team on newly deployed technologies and act as an escalation point and subject matter expert for all information security owned systems.
• Work closely with Information Security Risk and Compliance team to document internal operational and audit procedures around information security owned infrastructure. Act as a technical lead during internal and external audit engagements. Gather technical evidence, speak to information security process and procedures aligned to audited controls and environments.
• Stay abreast of developments in the Information Technology industry specifically as they relate to Information Security.
• Provide information security related guidance and support teams.

Qualifications:

• A bachelor’s in computer science or related field OR a High School Diploma/GED and appropriate on the job experience in information technology and/or information security.
• Minimum of5 years of experience as an information security engineer, IT systems administrator, or other technical focused information security role.
• Information security industry certifications such as: CISSP, PNPT, ,OSCP, eWPTX, eCPPT, AWS Solutions Architect . are preferred.
• Networking focused industry certifications such as Cisco CCNP, CCIE, AWS Solution Engineer,
• Must have deep knowledge in all versions of Windows and Linux Operating Systems.
• Must have experience we enterprise level EDR protection and understand the fundential MTRE AT&TCK framework.
• Must have solid networking foundation both in on-premise  networking and cloud architecture.
• Required experience in Azure and AWS security related controls.
• Required strong scripting capability in one of the following languages: PowerShell, Python, Bash, C#.

Tags