DescriptionThe Cyber Defense Engineer has responsibilities in multiple information security disciplines relevant to the team such as: incident response, vulnerability management, intrusion detection and prevention, threat intelligence, and security operations, in cloud and on-premise environments
KEY RESPONSIBILITIES:
- Investigates and responds to cyber incidents within the network environment.
- Collects data from a variety of security monitoring tools, including intrusion detection system alerts, firewall and network traffic logs, and host system logs to analyze events that occur within the environment.
- Recommends and documents information security requirements and controls necessary for the protection of information resources.
- Provides guidance and assistance regarding information security matters such as the interpretation of information security policies and requirements or their applicability to particular situations.
- Participates in information security incident response activities, risk assessment and risk management activities, and vulnerability assessment and vulnerability management activities spanning multiple business units.
- Participates in information security projects and initiatives.
- Performs operational tasks supporting information security functions such as intrusion detection and prevention, security monitoring, vulnerability remediation, security incident prevention and remediation.
- Supports, maintains, monitors, troubleshoots and enhances security monitoring and response tools, methodologies, software, and hardware.
- Analyzes data from Information Security tools and provides reports and recommended response actions to Information Security management.
- Publishes regular status reports and submits to management.
- Performs related responsibilities as required. Level: An experienced cybersecurity professional, typically obtained through basic education and short-term work experience.
- Works semi-independently with periodic management check-ins.
- Responsibilities typically include: Establishing operational plans for job area; Developing and implementing new products, processes, standards or operational plans that will have impact on the achievement of functional results. Problems faced are difficult to moderately complex. Requires communication with IT leadership.
MINIMUM QUALIFICATIONS:
- A bachelor's degree and three years of related IT experience including demonstrated technical knowledge in multiple information security domains, OR an equivalent combination of education, training, and experience.
- Excellent task management and team participation skills.
- Good written and verbal communication skills.
NOTE: Tasks related to this position can be performed remotely with only occasional supported visits to an Emory University location. Emory reserves the right to change this status with notice to employee.
