State: VA
City: Arlington
Zip Code: 22203

Overview

AvalonBay Communities, Inc., an equity REIT, has a long-term track record of developing, redeveloping, acquiring and managing distinctive apartment homes in some of the best U.S. markets, and delivering outsized, risk-adjusted returns to shareholders. With equal parts experience and vision, we’ve established a leadership position rooted in our purpose of creating a better way to live and that is always focused on building value for the long term.

Creating a better way to live is the purpose that binds AvalonBay associates. We take that purpose seriously and expect you will as well. By focusing on collaboration, innovation, and taking ownership of our choices and actions, we act in ways that focus on creating value for our customers, investors and associates. Your positive, professional, and consistent personal interactions make AvalonBay a great place to work.

The Role

This is a highly technical role responsible for supporting cyber security operations by designing, testing, and implementing advanced security controls to detect and prevent attacks. The Engineer will identify potential attack paths and administer security policies to reduce risk. The Engineer will also detect and mitigate information system security vulnerabilities and issues, investigate potential cyber security incidents, and implement security recommendations based on industry best practices.

The position requires in-depth knowledge of cyber security, zero trust, and networking. The role will often require proactive research of information technology trends and security standards. High level communication skills are essential to successfully translate requirements to business stakeholders.

This person will:

• Design and implement network access control security policies which detect and restrict unauthorized devices
• Manage security service edge (SSE) policies to protect devices from threats and enforce zero trust concepts for remote access to internal systems
• Identify and mitigate new system security vulnerabilities using research, scanners, and enumeration techniques. Ensure systems are patched in alignment with internal policies by prioritizing, recommending, and remediating vulnerabilities using a risk-based approach. Manage firewall rules to detect and prevent exploit attempts.
• Perform threat modeling and attack surface discovery across multiple environments. Identifying and hardening potential attack paths. Design and manage honeypots/lures to detect and respond to potential attacks in partnership with the security operations centers.
• Work with the Technology team to regularly perform tests and detect system weaknesses. Create and implement a plan of action to mitigate risk and maintain a high security standard.
• Facilitate third-party risk assessments by identifying supply-chain risks and creating recommendations for risk reduction
• Manage vendor relationships by serving as a primary contact for support, communications, enhancements, and incident response
• Support internal audit activities by serving as a subject matter expert between auditors and the business. Create and implement a plan of action to mitigate risks
• Provide transparency to stakeholders and management using dashboards, reports, metrics, and trend analysis.

Education:

• Bachelor's degree in computer science or related field.
• CISSP, OSCP, CCNA or similar industry certification strongly preferred.

Experience:

• 5 or more years of experience in IT, networking, hosting, and data in a multi operating system environment.
• 5 or more years of experience with information security including threat detection/mitigation, vulnerability management, user awareness, email firewall security, identity/access management, endpoint protection, firewall/IDPS security, auditing and risk assessment, incident response, data loss prevention, and policy development.
• Experience administering network security tools such as Palo Alto NGFW, Zscaler, or Forescout strongly preferred.
• Experience performing or managing red/purple team tests is a plus.
• Experience programming/scripting with PowerShell, Bash, or similar is a plus.

How AvalonBay Supports You

Additional Info

AvalonBay is proud to be an equal opportunity employer and is committed to an inclusive and diverse work environment free of discrimination and harassment.  We believe that in order to achieve our purpose of creating a better way to live, we must recruit, develop and retain associates with a wide range of backgrounds, experiences and perspectives and create an environment that encourages all voices to be heard, understood and appreciated. With this we know we can do great things.

AvalonBay makes employment decisions without regard to a person’s race, ethnicity, color, religion, sex, national origin, sexual orientation, gender identity, pregnancy (including childbirth, lactation or related medical conditions), age, physical or mental disability, genetic information (including characteristics or testing), citizenship status, military or veteran status, or any other status protected by the law.

For California residents, if you elect to apply to AvalonBay you accept the AvalonBay California Personnel Privacy Notice (https://www.avaloncommunities.com/california-personnel-privacy-notice/)

Job ID JR101936