Sr. IT Security Engineer

Responsibilities

The Senior IT Security Engineer designs and implements protective security controls to maintain the confidentiality, integrity, and availability of company data. They are responsible for managing security technologies, ensuring regulatory compliance, and conducting proactive monitoring and risk assessments.

Requirements

Candidates must have 5-7 years of experience in information security, specifically in security engineering, network security, or compliance. Proficiency with enterprise security platforms and a deep understanding of PCI DSS and NIST frameworks are required.

Skills

• Security Engineering
• Network Security
• PCI DSS
• NIST CSF
• NIST 800-53
• CrowdStrike
• Microsoft Sentinel
• Mimecast
• Qualys
• Illumio
• Identity and Access Management
• Privileged Access Management
• Zero Trust
• Azure Security
• Vulnerability Management
• Firewall Administration

About this role

Position Overview

Follett Higher Education is a leading educational service provider and
omnichannel retailer that provides students, faculty and staff, parents, and
fans with the course materials, learning tools, and retail services needed to
successfully support the collegiate journey. Follett Higher Education supports
over 6 million students through its 1,100 physical and 1,750 eCommerce campus
stores across North America.

The Senior IT Security Engineer is responsible for designing and implementing
protective and detective controls to maintain the confidentiality, integrity,
and availability of Follett data and ensuring compliance with applicable
regulatory standards, regulations, laws, contractual requirements, and best
practices. This position involves planning, design, implementation, enforcement,
and audit of security controls, policies, and procedures. Maintains knowledge of
trends and threats in information security, and recommends where additional
tools, technologies, controls, policies, and procedures are required to
appropriately manage Follett risk. Evaluates and recommends security products,
services, and/or procedures to enhance productivity and effectiveness. Conducts
proactive monitoring of Follett's security profile and works with Managed
Security Service Providers to accomplish tasks as needed.

The Senior IT Security Engineer will be instrumental in managing, configuring,
and ensuring compliance with our technical security systems. This includes, but
is not limited to, CrowdStrike, Sentinel, Mimecast, Qualys, Illumio, and others
as needed. They will also be responsible for the Engineering and oversight of
identity management solutions, including privileged account management,
multifactor authentication, and password vaulting solutions. A key part of the
role will be to focus on ensuring Payment Card Industry Data Security Standard
(PCI DSS) compliance across our network security tools and practices, as well as
NIST CSF and NIST 800-53.

Responsibilities

* Design, implement, and maintain enterprise security controls to protect
company data, systems, and IT infrastructure.
* Manage and administer security technologies, including CrowdStrike, Microsoft
Sentinel, Mimecast, Qualys, Illumio, and GlobalProtect.
* Ensure compliance with PCI DSS requirements, NIST Cybersecurity Framework
(CSF), and NIST 800-53 standards.
* Conduct security assessments, vulnerability analyses, compliance audits, and
risk evaluations to identify and address security gaps.
* Engineer and maintain identity and access management solutions, including
privileged access management, multifactor authentication (MFA), and password
vaulting.
* Implement and maintain network security measures, including firewalls,
network segmentation, secure connectivity, and Zero Trust principles.
* Support cloud security operations, including Azure native security controls
and cloud security best practices.
* Monitor security environments, investigate potential threats, troubleshoot
technical issues, and recommend remediation strategies.
* Develop and maintain security policies, procedures, and technical controls
aligned with organizational and regulatory requirements.
* Prepare security reports, communicate risks, and recommend improvements to
strengthen the organization's security posture.
* Collaborate with internal IT teams, business stakeholders, and Managed
Security Service Providers (MSSPs) to support security operations.

Qualifications
* 5-7 years of experience in information security, including at least 5 years
in security engineering, network security, firewall administration, or
compliance.
* Strong experience with enterprise security platforms, including CrowdStrike,
Qualys, Microsoft Sentinel, or comparable technologies.
* Knowledge of network security architecture, firewall management, network
segmentation, secure connectivity, and Zero Trust security models.
* Experience in securing cloud environments such as Microsoft Azure, AWS, or
Google Cloud Platform (GCP).
* In-depth understanding of PCI DSS compliance requirements, security audits,
and remediation processes.
* Familiarity with NIST CSF and NIST 800-53 security frameworks.
* Experience with identity and access management (IAM), privileged access
controls, MFA, and role-based access management.
* Demonstrated ability to conduct security risk assessments, vulnerability
management, and technical security troubleshooting.
* Experience collaborating with third-party security providers and supporting
regulatory compliance initiatives.

About Follett Higher Education

Retail · 5,001-10,000 employees · headquartered in Westchester, Illinois