Role: Cyber Security Engineer
Location: Birmingham AL, Charlotte NC, Raleigh NC, Dallas Tx, Memphis TN, New Orleans LA
Duration: C2H Long Term
Visa: Citizens, GC, H1B
Role Summary Cyber Security Engineer responsible for L2 security event/incident response, threat intelligence analysis, and operational support of enterprise security solutions across cloud (Azure) and on-premises environments.
Tripwire FIM MANDATORY. Focus on configuration management, vulnerability management, and CIRT support.
ResponsibilitiesIncident Response & SOC - Respond to SOC alerts, perform L2 analysis/containment
- Support Cyber Incident Response Team (CIRT) for attack detection
- Document incident response playbooks for new threats
- Produce weekly/monthly operational metrics
Configuration & File Integrity Management - Operate Tripwire FIM to track file system changes on critical systems
- Manage configuration drift using scanning tools vs baselines (CIS benchmarks)
- Work with asset custodians to remediate configuration deviations
Vulnerability Management - Conduct vulnerability scans using Tenable Nessus
- Prioritize/analyze findings, coordinate remediation
- Map threats/vulnerabilities to MITRE ATT&CK framework
Threat Intelligence - Collect/analyze threat intelligence using MITRE ATT&CK
- Create intelligence products for security teams
- Integrate logs into SIEM/threat management platform
Cloud Security (Azure) - Proficient Azure security monitoring and incident response
- Azure Defender + Sentinel integration experience
- Cloud configuration/vulnerability scanning
Required Experience - 3+ years cyber threat/information security
- Tripwire FIM hands-on (MANDATORY)
- Tenable Nessus vulnerability scanning
- Azure Security proficiency
- Familiarity: SOX, PCI-DSS, GLBA
- MITRE ATT&CK + STRIDE threat modeling
