As the largest pureplay adhesives company in the world, H.B.
Fuller's (NYSE: FUL) innovative, functional coatings, adhesives and sealants enhance the quality, safety and performance of products people use every day.
Founded in 1887, with 2023 revenue of $3.5 billion, our mission to Connect What Matters is brought to life by more than 7,000 global team members who collaborate with customers across more than 30 market segments in over 140 countries to develop highly specified solutions that enable customers to bring world-changing innovations to their end markets.Senior Cybersecurity EngineerLocation: Costa Rica, or St. Paul, MN (U.S.)The Cybersecurity Senior Engineer reports to the Director of Cybersecurity, and has primary responsibility in the development, monitoring, evaluation, and maintaining of systems and procedures necessary to protect host and network systems from unauthorized access and security threats and focus on protection of sensitive information.The Cybersecurity Senior Engineer typically participates in creating, implementing, and evaluating security standards, guidelines and procedures related to firewalls, intrusion detection, vulnerability scanning, host operating systems, and network devices.While it is essential for this position to understand and focus also on managing and extending the global monitoring and SIEM systems, installing and supporting security technologies, such as DLP, ATP, anti-virus, encryption, wireless, mobile security, multi-factor authentication, PKI, and content filtering and participating in various projects, the main focus and responsibility area will be network security – based on business needs and the current and continuously changing world around Cybersecurity threats and practices, this individual must be able to design and implement firewall technologies, Cloud security, network segmentation, Zero Trust mindset and SASE approach.This individual will be involved in a variety of host, desktop, and network security areas within the global Information Technology department.
Frequent communication with H.B.
Fuller staff in all regions is expected for troubleshooting, performance tuning, and project activity.
This position will act as an engineering lead for various efforts and projects related to Cybersecurity and demands also thorough understanding of how Cybersecurity interfaces with other IT infrastructure, network, DBA, and applications areas.
As primary M&A and IT/Business integration engineer, this individual will be involved with infrastructure design decisions and strategy; a good and founded understanding of Cybersecurity impact and trending is key for this position.The will also serve as mentor for other Cybersecurity/IT engineers and be responsible for business leadership presentations – proactive, productive, efficient, understanding how to prioritize is expected as well as delivery of consistent results.The will also be expected to work through trouble tickets with internal and external partner vendors in the support of our global Infrastructure.
There is an on-call expectation for this role.Systems Support [55%]Primary responsibility for multiple key areas of host and network security implementation, deployment and support technologies related to host, network and cloud platforms including:Firewalls, Endpoint Security, IDS/IPS, sandboxing, URL filtering, Web Security, Cloud- and email securityNetwork segmentationZero Trust network access practicesResearch appropriate technology and product offeringsAssist with configuration and implementation deployments for new apps, upgrades, and architectural changesDesigns, supports, and installs security and monitoring technologiesPerforms analysis of system logs and user access issuesParticipates in emergency response team activities regarding security incidentsPerforms in-depth support for information security incidents including internal violations, hacker attacks, virus, and other system outagesPrepares and updates security policies, processes, and related technical documentationThis is a support engineering role also accountable for change control, configuration management and CMDB accuracy, and internal support processes improvement or automationProject Activity [30%]Consult with Cybersecurity and risk management individuals, network lead engineers, business and systems analysts, infrastructure, and desk side in assigned projects to identify user needs and project task requirementsServe as lead Cybersecurity engineer for smaller or medium activities requiring limited resources or technical depthDocumentation and Communication [15%]Prepare documentation for the systems, scripts, procedures in accordance with department and corporate standardsPrepare and submit project status and/or other reports to the Project Manager or Security Manager as requiredDevelop and maintain effective working relationships with global users and technical peersConduct effective, on-going communication, both written and verbalKeep abreast of new developments in security hardware and software technology, and be informed of the latest techniques, technologies, and practicesMinimum Requirements: Bachelors in BA, CS MIS, or technical degree/equivalent10+ years of on-the-job experience including:General infrastructure (server, load balancer…) and PC fundamentalsKey monitoring events and conditions on various network hardware and softwareVPN configurations and usageFirewalls, and DMZ architectureGeneral security, monitoring tools, IDS/IPSDetailed technical knowledge sufficient to independently identify and diagnose system malfunctions, bots, and other malware issuesEndPoint Security incl.
advanced EDR (such as Cisco AMP, Crowdstrike, Microsoft Defender, Carbonblack etc.
)Knowledge of Microsoft EMS E5 products, like Cloud App Security, Azure Information Protection, Intune, etc.Vulnerability Management (like Tenable Nessus or Rapid7 InsightVM)User Awareness ProgramData Loss/Leakage PreventionPKI – Public Key InfrastructureThorough understanding of OSI modelIT Infrastructure Library (ITIL) functions (incident, change, problem, asset management)Preferred Requirements:Database security, server and client security and encryption, cloud security (SASE)Cisco firewalls (ASA/FTD/FMC), Open DNS/Umbrella, Cisco IOS (interfaces, configuration, routing, QOS, …)Email Security (like Cisco, Microsoft)Cisco CCENT, CCNA, CISSP, SANS certifications is a plusSecurity certifications, like CISSP, is a plusAdvanced Threat Protection, security information and event Management (SIEM), and security advanced threat protection (ATP) systems useUnderstanding of security standards like SOC2, ISO 2700x, UCF, NISTPhysical Environment:Basic office environmentMust be able to rack typical server and appliance gear in standard 42u rackLift approximately 40 pounds (18 kg) unassisted
