Data Security Engineer

At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology (IT) team equips our colleagues with the latest tools to complete their work efficiently, with the highest standards of excellence. The team is responsible for shielding the company’s systems from security risks, while designing technology strategies that enable AIG’s businesses to achieve their goals. Innovation in IT drives innovation across the organization

The Data Security Engineer will be responsible for deploying, tuning and maintaining security policies and enhancements to protect company sensitive and confidential information in order to mitigate security threats to the corporate network, assets, data, and users.

This position is a hands-on role that requires knowledge of data security technology related to data loss prevention, data encryption, database security, unstructured and structured data management, and email security.  The candidate must understand how the design of the capabilities impacts the management and administration, as well as the end user experience. In this role, the candidate will work with the engineering team and other business teams to thoroughly test changes to data security solutions in order to ensure efficacy of protection and detection and ensure effectiveness of the tools.  The successful candidate will demonstrate strong knowledge of and experience with the general information security controls employed to protect data in transit and at rest on endpoints and in applications, as well as the ability to identify, test and implement new data protection solutions.

The successful candidate will have demonstrated expertise in all aspects of data security and the technologies leveraged for this purpose.  The candidate will have at least 4 years of experience working in a complex environment providing comprehensive solutions and approaches to solving the challenges associated with a large, complex, global environment requiring strong data protection controls that are enforced with minimal impacts to the business processes.

KEY RESPONSIBILITIES AND DUTIES:

• Perform installation and configuration management of security systems and applications, including policy assessment of the data security stack and set of policies and standards.

• Perform security related tasks, including the day-to-day administration of the different information security tools and devices, fine tuning configuration of the devices to reduce false positives and improve effectiveness in security event monitoring.

• Ensure that security tools are performing optimally and security events are detected in time for remediation.

• Work with the security analyst and content management teams to ensure data ingested by the SIEM is useful, reduces white noise, and is properly leveraged and actioned for incident response.

• Implementing security measures to protect the enterprise as well as prevent data loss and respond to security incidents.

• Perform security analysis of traffic patterns and adjust policy and procedures.

• Performing technical and non-technical risk assessments on our systems and make recommendations to identify and improve security risk.

• Determine and implement appropriate levels of security configuration, controls and monitoring.

• Developing quality program metrics to measure program performance as well as enterprise risk.  This data must provide actionable intelligence to help drive the data security program.

• Work with other business units to develop appropriate plans for the implementation and configuration of data security technologies thereby ensuring business engagement and understanding of the data security initiatives.

• Bachelor's degree in information technology (or related field) or equivalent experience.

• 4+ years in IT data security engineering and operations in an enterprise environment.

• 4+ years of experience in IT, or related area, with a focus on security tool technology, security management and policy enforcement.

• Hands on experience supporting security requirements of a large, global enterprise environment.

• Prior experience with data security, encryption technology and related applications, tools and solutions.

• Experience with installation and support data security tools.

• Experience in developing, documenting and maintaining security procedures.

• Strong knowledge of TCP/IP and networking protocols.

• Strong understanding of database privileged activity monitoring is preferred.

• In-depth knowledge of operating systems, applications, network, and database security architectures.

• Strong analytical and organizational skills.

• Excellent verbal and written communication, problem solving and time management skills.

• Ability to work efficiently and productively with minimal guidance or direction.

• Strong team player with initiative and ability to take charge of their area of expertise.

• Ability to clearly and effectively communicate concerns, issues and research to other teams.

Desired Skills:

• One or more IT Security related certifications is highly preferred, such as CISSP, SSCP, CISM or CEH.

• Understanding of Security Information and Event Management (SIEM) with knowledge of Log Collection, Parsing of log files and how this data can be effectively used to mitigate risk.

• Knowledge in security orchestration, automation and response.

• Knowledgeable using scripting languages and use of regex.

Ready to accelerate your career? We would love to hear from you!

Veterans are encouraged to apply!

#LI-AIG #LI-Onsite

At AIG, we value in-person collaboration as a vital part of our culture, which is why we ask our team members to be primarily in the office. This approach helps us work together effectively and create a supportive, connected environment for our team and clients alike.

Enjoy benefits that take care of what matters

At AIG, our people are our greatest asset. We know how important it is to protect and invest in what’s most important to you. That is why we created our Total Rewards Program, a comprehensive benefits package that extends beyond time spent at work to offer benefits focused on your health, wellbeing and financial security—as well as your professional development—to bring peace of mind to you and your family.

Reimagining insurance to make a bigger difference to the world

American International Group, Inc. (AIG) is a global leader in commercial and personal insurance solutions; we are one of the world’s most far-reaching property casualty networks. It is an exciting time to join us — across our operations, we are thinking in new and innovative ways to deliver ever-better solutions to our customers. At AIG, you can go further to support individuals, businesses, and communities, helping them to manage risk, respond to times of uncertainty and discover new potential. We invest in our largest asset, our people, through continuous learning and development, in a culture that celebrates everyone for who they are and what they want to become.

Welcome to a culture of inclusion

We’re committed to creating a culture that truly respects and celebrates each other’s talents, backgrounds, cultures, opinions and goals. We foster a culture of inclusion and belonging through learning, cultural awareness activities and Employee Resource Groups (ERGs). With global chapters, ERGs are a cornerstone for our culture of inclusion. The talent of our people is one of AIG’s greatest assets, and we are honored that our drive for positive change has been recognized by numerous recent awards and accreditations.

AIG provides equal opportunity to all qualified individuals regardless of race, color, religion, age, gender, gender expression, national origin, veteran status, disability or any other legally protected categories.

AIG is committed to working with and providing reasonable accommodations to job applicants and employees with disabilities.  If you believe you need a reasonable accommodation, please send an email to [email protected].