Engineer- Information Security I USA

Responsible for helping analysts on our global Information Security Team design, standardize, automate, and orchestrate solutions into production and maintain their efficacy throughout the lifecycle. The scope includes, but is not limited to, designing automated process flows, developing automated SOC response playbooks, on-boarding security technologies into SOAR platforms, creating custom security applications, API integration, and interface development. Additional responsibilities include serving as a member of the Information Security team and providing global incident response support as a member of the Cybersecurity Incident Response Team.

Education/Experience

• Bachelor’s degree in MIS, computer science, or related field
• Minimum 2 years of relevant work experience

Required Skills/Competencies

• Strong knowledge and/or demonstrated experience of security tools is required.
• 2+ years of experience with various Microsoft Windows operating systems is required.
• 2+ years of experience with various Microsoft Windows Server operating systems is required.
• 2+ years of experience with Network server /Active Directory (AD) administration experience required.
• Experience working with APIs.
• Experience troubleshooting in a technical environment, analytical, problem-solving skills.
• Experience with developing scripts and other development scripting and languages (e.g., Python, PowerShell, Java, JavaScript, .NET, Bash, Perl, PHP, etc.)
• Experience with Security Orchestration, Automation, and Response (SOAR) practices including playbook development, data and artifact collection, process automation, technology orchestration, and response actions.
• Experience with database management software, such as MySQL, Oracle RDBMS, and Microsoft SQL Server.
• Strong understanding of event analysis, incident response, threat intelligence, cyber investigation methodology and chain-of-custody requirements.
• Strong knowledge of risk assessments, penetration testing, vulnerability analysis or disaster recovery
• Working knowledge of Enterprise Firewalls is required.
• Good knowledge or prior experience with SIEM and end-point protection (SCEP, Sophos, Bit9, Carbon Black, CrowdStrike) a plus.
• Good knowledge of networking protocols, such as TCP, IP, and OSI models.
• Ability to work in a 24x7 global environment.
• Experience Managing project timelines, budgets, and documentation.
• Excellent Organization / Communication Skills.

Essential Responsibilities

Primary Responsibilities

• Designing automated process flows
• Developing automated SOC response playbooks
• On-boarding security technologies into SOAR platforms
• Creating custom security applications
• API integration and interface development
• Designing, standardizing, automating, and orchestrating solutions into production and maintaining their efficacy throughout the lifecycle
• Works on various projects related to evaluating, testing, and deployment of new software systems/technology.
• Support updates to the Incident Response plans.
• Investigates, troubleshoots, analyzes, and resolves problems related to the IT security infrastructure as well as application and system problems that have been escalated for support.
• Monitor and audit security aspects of IT and product operations.
• Participate in solution design reviews for applications, servers, and networking.
• Assessment of escalated incidents from the business departments or Security Team members
• Response to security incidents and provides fault resolution and escalation.
• Meeting with the management team to assess and define the system requirements.

Key Competencies

• Undertakes analytical activities and delivers analysis outputs, in accordance with customer needs and conforming to agreed security standards.
• Analyses business processes, identifies alternative solutions, assesses feasibility, and recommends new approaches. Contributes to evaluating the factors which must be addressed in the change program. Helps establish requirements for the implementation of changes in the business process.
• Investigates operational requirements, problems, and opportunities, seeking effective business solutions through improvements in automated and non-automated components of new or changed processes. Assists in the analysis of stakeholder objectives, and the underlying issues arising from investigations into business requirements and problems and identifies options for consideration. Identifies potential benefits, and available options for consideration. Works with clients/users in defining acceptance tests.
• Defines scope and business priorities for small-scale changes and may assist in larger scale scoping exercises. Elicits and discovers requirements from operational management and other stakeholders. Selects appropriate techniques for the elicitation of detailed requirements taking into account the nature of the required changes, established practice and the characteristics and culture of those providing the requirements. Specifies and documents business requirements as directed, ensuring traceability back to source. Analyses them for adherence to business objectives and for consistency, challenging positively as appropriate. Works with stakeholders to priorities requirements.
• Applies data analysis and data modeling techniques to establish, modify or maintain a data structure and its associated components (entity descriptions, relationship descriptions, attribute definitions).
• Reviews requirements and specifications and defines test conditions. Designs test cases and test scripts under own direction, mapping back to pre-determined criteria, recording and reporting outcomes. Analyses and reports test activities and results. Identifies and reports issues and risks associated with own work.
• Selects and uses tools and methods to establish, clarify and communicate the user experience, users' characteristics, and tasks, and identifies the technical, organizational, and physical environment in which complex products or systems will operate.
• Develops implementation plans for dealing with more complex requests for change, evaluates risks to integrity of infrastructure inherent in proposed implementations, seeks authority for those activities, reviews the effectiveness of change implementation, and suggests improvement to organizational procedures governing change management. Leads the assessment, analysis, development, documentation, and implementation of changes based on requests for change.
• Identifies and resolves issues with applications, following agreed procedures. Uses application management software and tools to collect agreed performance statistics. Carries out agreed applications maintenance tasks.
• Other duties as assigned.
• Job description subject to change at any time.

Reporting Relationships

• This position will report to the Manager- IT Security

Travel

• 0% - 5% (On occasion/as needed for training, etc.)

Estimated Annual Salary Range

• $64,000 - $90,000 Estimated Annual Salary Range

US Physical Requirements

• Will sit, stand, or walk short distances for up to the entire duration of a shift.
• Will climb stairs on an occasional basis.
• Will lift, push, or pull up to 27 pounds on an occasional basis.
• Required to use hands to grasp, lift, handle, carry or feel objects on a frequent basis.
• 20/40 vision in each eye, with or without correction, is required.
• Must be able to comply with all safety standards and procedures.
• May reach above shoulder heights and below the waist on a frequent basis.
• May stoop, kneel, or bend, on an occasional basis.
• The ability to wear personal protective equipment is required (including but not limited to; steel toed shoes, gloves, safety glasses, hearing protection, protective jacket or apron and arm guards).
• All associates working on the production floor may be required to wear a respirator at any given time and thus, the ability to wear a respirator is a condition of employment and continued employment (requires little or no facial hair).

All positions in our office require interaction with people and technology while either standing or sitting. To best service our customers, internal and external, all associates must be able to communicate face-to-face and on the phone with or without reasonable accommodation. First Solar is committed to compliance with its obligations under all applicable state and federal laws prohibiting employment discrimination. In keeping with this commitment, it attempts to reasonably accommodate applicants and employees in accordance with the requirements of the disability discrimination laws. It also invites individuals with disabilities to participate in a good faith, interactive process to identify reasonable accommodations that can be made without imposing an undue hardship.

Potential candidates will meet the education and experience requirements provided on the above job description and excel in completing the listed responsibilities for this role. All candidates receiving an offer of employment must successfully complete a background check and any other tests that may be required.

Equal Opportunity Employer Statement: First Solar is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that diversity and inclusion is a driving force in the success of our company.