IT Security Engineer (Job number: 1432)

We are seeking a Security Engineer to join our IT team supporting our federal division.

At Johnson Controls, we support our nation's most critical facilities, the people who occupy them, and the missions they enable. Johnson Controls Federal Systems (JCFS) is a specialized team serving as a trusted partner to the federal government. We help modernize U.S. military installations, Department of Defense and other federal agency facilities to be smarter, more resilient, efficient, sustainable, and secure.

Location: Remote / Virtual (Work from home)
Benefits: Eligible for benefits on first day of employment
Vacation: 3 weeks of paid vacation per calendar year
Travel: Very limited

As aSecurity Engineer, you will:

• Evaluates and develops secure solutions, driving adoption for security engineering. Analyzes business impact and exposure, based on emerging security threats, vulnerabilities and risks. Communicates security risks and solutions to business partners and IT staff
• Researches and designs new technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners and vendors. Contributes to the Information Security reference architecture.
• Delivers security engineering 'security by design' services across multiple business units and geographies
• Works closely with enterprise IT , PMO, other functional area specialists to ensure adequate security solutions are in place throughout all IT systems and platforms to mitigate identified risks sufficiently, and to meet business objectives and regulatory requirements
• Serves as the security expert in application development, database design, network and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices.
• Delivers perspective in providing network and system security advice and risk analysis to business units who engage with the Information Security team
• Thought leader in architecting and designing security infrastructures
  
  

Required Qualifications:

• Information Security work experience within a relevant security engineering or architecture role, with a broad exposure to infrastructure/network and multiplatform environments in diverse geographic and regulatory environments. 10+ years preferred
• Understanding of how to design security devices, networks and systems compliant with the requirements of a desired security posture or state.
• Knowledge of zero trust architecture with a clear understanding of Identity Management
• Knowledge of enterprise security incident response strategies, processes, techniques, and can readily apply this knowledge to existing security technologies to drive effectiveness and efficiency within the security organization.
• Highly knowledgeable of modern network security technologies such as network and host-based intrusion detection/prevention, vulnerability assessment (including app/web-layer interrogation), DDOS protection, Security Information Management, host-based integrity checking, end point security, AV, Data Loss Prevention, etc
• Understanding of intrinsic security weaknesses within core infrastructure components such as firewalls, TCP/IP, VPN, file transfer and remote administration protocols. Experience working with Cisco firewalls preferred.
• Highly knowledgeable of network and system security principles such as defense in depth, granularity of privilege, etc. and how they are applied in practice, not only in theory
• Strong written and verbal communication skills
• Demonstrated technical experience, with the ability to interface effectively with a broad range of people and roles, including managers, IT leaders, and technology vendors
• The ability to obtain and maintain required government security clearances or badges as needed. (This involves a background/character, criminal history, employment, and credit check.)

Preferred Education:

• Bachelor's Degree (Master's Degree preferred) in Computer Science, Information Systems or another related field; or equivalent work experience. Education relevant to IT security preferred.
• Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent

Who We Are

At Johnson Controls (NYSE:JCI), we are One Team working collaboratively to create purposeful solutions that make a difference in the world. We are a Fortune 500 company with more than 100,000 employees worldwide offering the world`s largest portfolio of building technology products, solutions and services. As a member of our Federal Systems team, your work matters. We value and recognize your contributions and want to help you succeed. We invest in our employees, provide opportunities for growth and advancement, and foster a culture of inclusion and respect.

To learn more about who we are and what we do, please check out our Take a Journey video.

Recently, Johnson Controls has been recognized by several organizations for leadership in Environment, Sustainability and Governance, as well as innovations in smart building platforms:

* Named to FORTUNE's "Most Admired Companies" List

* Corporate Knights Global 100 Most Sustainable Corporations in the World

* Named to ForbesNet Zero Leaderslist

* CDP 2023Climate Change 'A List'

* Ranked 67 on the Drucker Institute's list of best-managed companies in America

* ForbesBest Employers for Diversitylist.

* NewsweekAmerica's Greatest Workplaces for Diversity

* Ethisphere 2024World's Most Ethical Companieslist for the 17th time

* NewsweekAmerica's Greatest Workplaces for Women in 2024

* Named to Newsweek America's Greatest Workplaces for Veterans 2024 / 2025listing

* Named toForbes America's Best Employers for Veterans 2024

* Named one of the top military friendly employers by military.com.

Johnson Controls is an equal employment opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, genetic information, sexual orientation, gender identity, status as a qualified individual with a disability, or any other characteristic protected by law. For more information, please view EEO is the Law. If you are an individual with a disability and you require an accommodation during the application process, please visit www.johnsoncontrols.com/careers

Division: JCFS (Johnson Controls Federal Systems)