IT Security Engineer

Summary

This is a mid to senior level position with primary responsibility for the engineering, implementation, support, and performance monitoring of cybersecurity systems and equipment. This role monitors and reports on events and concerns relating to the information security of all Casino networks and systems.  Performs high-level security duties and provides advanced technical assistance to users and IT staff.  Beyond managing technical threats this role leads security awareness initiatives and collaborates with departments to train staff in both technical and social vulnerabilities.

The ideal candidate must possess strong analytical and strategic thinking, as well as planning and organizational skills, advanced problem-solving abilities, and a high degree of technical expertise.  They must also show sound professional and technical judgment and have exceptional written verbal communication skills. 

Professional Responsibilities Include:

• Provide technical leadership of cybersecurity initiatives including vulnerability and threat management, endpoint security, SIEM operations, email security, data loss prevention, user security awareness, data governance.
• Work with the Tribal Gaming Commission to ensure compliance with Tribal, State and Federal regulations as they pertain to Information Technology at Rolling Hills Casino Resort.
• Work with Executive Leadership to build and implement IT security strategies for the organization.   
• Manage existing IT Security platforms including CrowdStrike Falcon, Microsoft Defender, Darktrace, Abnormal Security, Proofpoint, Conceal Browse, KnowBe4, and related security technologies.
• Monitor, analyze, and report on relevant events gathered with existing tools such as ManageEngine Log360 and other integrated security data sources.
• Research emerging threats, attack techniques, and evasion methods; proactively report and act on detection and prevention recommendations.
• Maintain current knowledge of security trends, vulnerabilities, and adversary tactics.
• Design, implement, and maintain a security awareness program strategy, including phishing simulations and workforce education.
• Conduct and facilitate in-person and virtual cybersecurity training, including regular participation in New Hire Orientation and Operations Meetings.
• Maintain, track, and report cybersecurity training and awareness metrics to management.
• Participate in data governance and data classification initiatives.
• Perform or oversee security reviews, technical assessments, and risk evaluations.
• Respond to cybersecurity incidents and perform investigation, containment, and post-incident reporting as required.
• Evaluate new security solutions and lead proof-of-concept implementations.
• Assist the Service Desk during system updates, patches, and security changes through formal change management processes.
• Act as a technical mentor and escalation point for support personnel.
• Remain informed of job-related issues through professional networking, training programs, seminars, and trade publications.
• Perform other duties as assigned.

Qualifications

• Strong knowledge of all Microsoft Products, with focus on Server operating systems.
• Experience with Palo Alto enterprise firewalls.
• Experience with Microsoft Entra, Intune and Azure AD environments.
• Advanced experience with Windows Server, Active Directory, Organizational Units, and Group Policy.
• Working knowledge of Linux systems and command-line administration.
• Experience with Cohesity system backup and recovery solutions.
• Strong understanding of TCP/IP, VLANs, VPNs, and firewall architecture.
• Proficiency in PowerShell and working knowledge of Python for automation and security engineering tasks.

Requirements

• Minimum 21 years of age.
• Interacts with users in a professional, courteous, and responsive manner.
• Understanding that immediate response to security events may impact work hours or schedule.

Education and/or Experience

Bachelor’s degree preferred, or equivalent professional experience.

Approximately 2+ years of progressive experience in enterprise IT and cybersecurity roles, with increasing responsibility for security operations, systems administration, and security engineering functions.

Certificates, Licenses, Registrations

Professional certification is strongly preferred, such as:
CompTIA A+
CompTIA Network+
CompTIA Security+
CompTIA Linux+
CompTIA Server+
CompTIA CySA+
CompTIA PenTest+
(ISC)² SSCP

Ability to obtain and maintain required gaming license and Title 31 certification.

Working Environment
The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. While performing the duties of this job, the employee is occasionally exposed to tobacco smoke, wet, cold, hot, and/or humid conditions, fumes or tobacco smoke, toxic or caustic chemicals, extreme cold, extreme heat, and risk of radiation. The noise level in the work environment is usually moderate. Position requires frequent use of hands to finger, handle, or feel; ability to stoop, kneel, bend, twist, crouch or crawl; ability to stand, walk, sit, reach with hands and arms, climb or balance. Position requires ability to push, pull, lift and/or carry up to 50 lbs.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Duties, responsibilities, requirements and expectations pertaining to this job are subject to change as needed.