August 25, 2016

Sr. Security Engineer

PHH Corporation - Mount Laurel, NJ

View Job Summary View Job Summary
  • Company
    PHH Corporation PHH Corporation
  • Location
    Mount Laurel, NJ
  • Job Type
  • Job Classification
    Full Time
  • Experience
    Mid-Career (2 - 15 years)
  • Education
    Bachelors Degree
  • Company Ref #
  • AJE Ref #

Job Description


The role of the Senior Security Engineer is to provide direction to the Security Program which includes implementing new solutions, advocating for secure best practices and prioritizing risks. This includes prioritizing the program objects to remediate the highest risks, as success in this role is defined by the gap between the desired risk appetite and the current risk landscape. This role will report directly to the Director of Security Operations and may participate in various working groups / committees.


The Senior Security Engineer is responsible for the following areas of PHH s IT Operating Model:
* Strategic Planning
o Information Security Plan
Maintenance and documentation of the Information Security Roadmap and integrating security services into Business and IT planning activities
* Initiate & Develop
o Security Solutions
Providing deliverables associated with the development and execution of industry accepted security technology and practices
* Sustain & Maintain
o Privacy & Data Protection
Interfacing with the Technology Risk Management group and establishing and monitoring compliance with the control framework, following up on regulatory and audit remediation and ensuring that employees are appropriately educated in the policies, controls, procedures and standards associated with their roles
* Deliver IT Services
o Security Operations
Execution and documentation of Information Security Operations which consists of the management of contracts, risk, performance, relationships, oversight, external resources
* General:
o Understands the team s direction and objectives
o Prepares presentation materials for suggesting enhancements to the existing environment
o Defines best practices and guidelines for security related technology / processes
o Collaborates with IT, Legal, Finance and HR teams as needed to ensure asset protection
o Manages vendors in accordance with the Vendor Management Program
o Manages controls in accordance with the Control Framework
o Reports on Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs)
* Customer:
o Collaborates with customers to identify and remediate risks
o Acts as an advocate for the customer
* Talent Development:
o Arranges formal training, or other experiences to foster learning and development
o Recognizes developmental opportunities and takes steps to address them

To perform this job successfully, an individual must have the following education and/or experience:
* Required:
o Bachelor s Degree or relevant work experience
Preferred Majors: Computer Science, Information Technology, or a closely related field
o Minimum 15+ years hands-on, broad-based information security experience
o Minimum 10+ years technical experience across multiple platforms (i.e. Mainframe, Windows, UNIX)
o Must qualify for at least 5 of the requirements listed below
5+ years of experience with application security solutions
5+ years of experience with identity management solutions
5+ years of experience vulnerability management solutions (i.e. Rapid7)
5+ years of experience with encryption tools (i.e. PGP)
5+ years of experience with data loss prevention solutions (i.e. Vontu)
5+ years of experience with network tools (i.e. firewalls, IDS/IPS, etc.)
5+ years of experience with threat detection / analytic tools (i.e. FireEye)
o Experience leading centralized and/or matrixed teams in a distributed environment
o Minimum 5+ years working in a regulated environment
o Experience with IT industry standards including COBIT, ITIL, FFIEC, PCI, NIST and ISO 27001
* Preferred:
o Possesses an industry recognized security related certification (i.e. CISSP, CISA, CISM)
o Possesses a PMP or other project management certification

* Proven ability to manage people, projects, administrative tasks, and cost
* Excellent communication skills (both written and verbal) with strong presentation and facilitation
* Demonstrated ability to influence and consult (providing options with benefits, risks and challenges) while providing thought leadership to stakeholders in solving process and/or technical problems
* Deep understanding of the IT lifecycle and related planning processes
* Demonstrated experience delivering results, finding innovative solutions, managing and leading in a fast paced dynamic complex environment
* Effective bartering and negotiation skills
* Ability to provide third-party oversight of vendors, suppliers, and contractors who provide a broad spectrum of products and services
* Experience at working both independently and in a team-oriented, collaborative environment is essential

* Must pass PHH Corporation s Background Screening process prior to beginning employment. Additionally, as a condition of employment, you may be required to pass client-specific background check requirements or Federal/State licensing requirements, if applicable.

* Strong interpersonal and communication skills
* Flexible and adaptive
* Behaves as a leadership role model
* Builds strong working relationships
* Drives and delivers exceptional results
* Builds and motivates a high performing team
* Persuasive, encouraging, and diplomatic
* Ability to elicit cooperation from a wide variety of sources
* Strong written and oral communication skills
* Adept at conducting research into product and service-related issues
* Must be able to learn, understand, and apply new technologies
* Customer service skills an asset
* Ability to effectively prioritize and execute tasks in a high-pressure environment

* Required:
o Proficient in Microsoft Office product suite
* Preferred:
o Knowledge of managing IT resources and services by using the Service Now and Clarity application suites effectively

* Office based position, no physical requirements

* None

* Minimal amount of travel required
* Standard 40 hour week, Monday to Friday. Some potential for out of normal hours work supporting specific projects or events
* Will be required to balance work life effectively to ensure demands of job are being met and exceeded
* Exempt position

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to this job.

The requirements and the physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

PHH is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.

* Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities.