Information Security Engineer

Itron, Inc. (NASDAQ: ITRI), is a world-leading technology and services company dedicated to the resourceful use of energy and water. We have recently been named a Grid Edge Award winner by Greentech Media for its OpenWay Riva IoT solution. The Grid Edge Awards represent the top 20 companies or projects that have a demonstrated potential to shape tomorrow’s distributed energy systems.

Itron is currently looking for an Information Security Engineer to assist in analysis of security alerts and selecting and deploy technical controls to meet specifics security requirements, and ensure that Itron securely protects the confidentiality, availability and integrity of Itron intellectual property and customer data. This person will be a major contributor to network security analysis and projects and will work to train junior staff in network security.

Job Duties & Responsibilities:

· Direct, hands-on experience managing security infrastructure such as firewalls, WAFs, endpoint protection, SIEM and log management technology Validate IT infrastructure and other reference architectures for security best practices, and recommend changes to enhance security and reduce risk where applicable

· Validate security configurations and access to security infrastructure tools, including firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), anti-malware/endpoint protection systems (EDR/HIDS), etc.

· Designing, documenting and successfully deploying multi-layer security architectures on private and public cloud (Azure and/or AWS specific experience required) Ensure cloud security policies, standards and processes are documented and enforced.

· Conduct incident response exercises with colleagues throughout the organization and incorporate lessons-learned into existing security architectures and practices

· Conduct forensic analysis of security-related incidents in a manner consistent with guidance from the organization's counsel, human resources or law enforcement, as the case may be

· Lead and/or participate in Information Security projects, such as security awareness, privileged information management, identity management, SOC services, and Pen Testing

· Continuously evaluate the organizations cloud security environment posture, providing regular risk and vulnerability reports, including penetration testing

· Develop tools, utilities and reports to detect, alert and report on security issues and policy violations.

· Support the implementation of an Information Security Program working with infrastructure management recommending necessary solutions, controls, policies and procedures

· Review security technologies, tools and services, and make recommendations to the broader security team for their use based on security, financial and operational metrics.

Qualifications:

Experience: 2+ years performing network security analysis or penetration testing

Education: Bachelor's degree in related field (Computer Science, Management Information Systems, or Computer Information Systems) or equivalent experience.

Required Skills:

· Knowledge about MITRE ATT&CK techniques and tactics and Information Security and risk management processes and technologies to defend against them

· Knowledge of public cloud configurations and capabilities (Azure preferred)

· A global perspective on privacy, security, and data protection issues

· Strong problem-solving ability with the desire to take ownership of issues and follow through until resolution

· Time management and prioritization skills

· Excellent oral and written communication skills

Preferred Skills:

· Experience automating Microsoft Azure security features and controls

· Strong working knowledge of networking concepts, including ports/protocols, Firewalls (Palo Alto and Cisco), routing and routing protocols and Operating systems (Linux, Windows)

· Experience working with PCAP files to support troubleshooting and security/forensic analysis

· Knowledge of SIEM Platforms (Ex: Splunk, or Azure Sentinel)

· Knowledge of EDR Platforms (ex: BitDefender, SentinelOne, or CarbonBlack)

· Knowledge of Vulnerability Management platforms (ex: Qualys, Tenable, or Rapid7)

· AZ-900 or more advanced Microsoft Azure certifications

Itron is an Equal Opportunity, Affirmative Action Employer. Qualified applicants are considered without regard to race, color, religion, sex, age, national origin, citizenship, sexual orientation, marital status, pregnancy, medical condition, veteran status, disability, genetic information, gender identity or other characteristics protected by law. If you require an accommodation in order to apply to this position, please contact your local recruiting representative at 1-800-635-5461 or email Accessibility@itron.com.

Itron enables utilities and cities to safely, securely and reliably deliver critical infrastructure services to communities in more than 100 countries. Our portfolio of smart networks, software, services, meters and sensors helps our customers better manage electricity, gas and water resources for the people they serve. By working with our customers to ensure their success, we help improve the quality of life, ensure the safety and promote the well-being of millions of people around the globe. Itron is dedicated to creating a more resourceful world. Join us: www.itron.com.