The Cybersecurity Engineer is responsible for supporting the cybersecurity program and strategy at a tactical and operational level (network, infrastructure, applications, and databases) to ensure that security controls are functioning efficiently and effectively. The Cybersecurity Engineer will assist with security logging, monitoring, alert management, GRC system administration, incident handling, vulnerability remediations, and configuration management. Furthermore, this position also supports the Information Technology team in doing security research and development, product evaluations, consulting, project support, and any other operational tasks needed to support the overall requirements of the program and strategy.
ESSENTIAL JOB DUTIES AND RESPONSIBILITIES- Research and evaluate emerging cyber security threats and ways to manage them.
- Translate raw SIEM data into actionable items for the environment.
- Onboard and manage vendor relationships in our GRC tool.
- Review SOC2 reports and interface with vendors to ensure they are maintaining adequate security posture based on risk to the organization.
- Assist with maintaining PCI DSS 4.0 compliance as needed.
- Proactively identify security flaws and vulnerabilities; both internal and external.
- Audit systems for secure configuration.
- Plan, implement, and upgrade security measures and controls.
- Define, implement, and maintain corporate security policies.
- Track common vulnerabilities and exposures (CVE) based security threats and map to internal controls and remediation plans.
- Map security practices to regulatory controls (HIPAA, CIS, PCI DSS).
- Monitor networks for security breaches and conduct root cause analysis (RCA) post breach.
- Conduct penetration testing individually, with the security team, or consultants.
- Perform security audits, risk assessments, and analysis.
- Make recommendations for enhancing systems security.
- Analyze corporate environment to identify potential intrusion points, leaks, and breaches. Research attempted breaches in security and rectify security weaknesses.
- Provide additional information security assistance as required.
BASIC AND PREFERRED QUALIFICATIONS (EDUCATION and/or EXPERIENCE)- Bachelor's degree in related field (IT) or equivalent experience required.
- CISA, CISM, GSEC, CISSP, or other relevant certifications preferred.
ADDITIONAL QUALIFICATIONS (JOB SKILLS, ABILITIES, KNOWLEDGE)- Strong knowledge of Azure AD and related security.
- Strong understanding of Identity Access and Management Systems (IAM).
- Expert level knowledge of Active Directory Services.
- Strong knowledge of Security Incident and Event Monitoring and management (SIEM).
- Strong knowledge of perimeter security methodologies.
- Knowledge of physical and logical security standards.
- Strong risk-assessment and measurement skills.
- Strategic thinking, planning, solution assessment, and validation skills.
- Strong collaboration, partnering, and teamwork skills.
- Expert level knowledge of PowerShell.
- Knowledge of SDLC methodologies.
- Knowledge of ITIL and ITSM methodologies.
- Windows Expert and working knowledge of Linux Operating Systems.
ESSENTIAL JOB DUTIES AND RESPONSIBILITIES- Research and evaluate emerging cyber security threats and ways to manage them.
- Translate raw SIEM data into actionable items for the environment.
- Onboard and manage vendor relationships in our GRC tool.
- Review SOC2 reports and interface with vendors to ensure they are maintaining adequate security posture based on risk to the organization.
- Assist with maintaining PCI DSS 4.0 compliance as needed.
- Proactively identify security flaws and vulnerabilities; both internal and external.
- Audit systems for secure configuration.
- Plan, implement, and upgrade security measures and controls.
- Define, implement, and maintain corporate security policies.
- Track common vulnerabilities and exposures (CVE) based security threats and map to internal controls and remediation plans.
- Map security practices to regulatory controls (HIPAA, CIS, PCI DSS).
- Monitor networks for security breaches and conduct root cause analysis (RCA) post breach.
- Conduct penetration testing individually, with the security team, or consultants.
- Perform security audits, risk assessments, and analysis.
- Make recommendations for enhancing systems security.
- Analyze corporate environment to identify potential intrusion points, leaks, and breaches. Research attempted breaches in security and rectify security weaknesses.
- Provide additional information security assistance as required.
BASIC AND PREFERRED QUALIFICATIONS (EDUCATION and/or EXPERIENCE)- Bachelor's degree in related field (IT) or equivalent experience required.
- CISA, CISM, GSEC, CISSP, or other relevant certifications preferred.
ADDITIONAL QUALIFICATIONS (JOB SKILLS, ABILITIES, KNOWLEDGE)- Strong knowledge of Azure AD and related security.
- Strong understanding of Identity Access and Management Systems (IAM).
- Expert level knowledge of Active Directory Services.
- Strong knowledge of Security Incident and Event Monitoring and management (SIEM).
- Strong knowledge of perimeter security methodologies.
- Knowledge of physical and logical security standards.
- Strong risk-assessment and measurement skills.
- Strategic thinking, planning, solution assessment, and validation skills.
- Strong collaboration, partnering, and teamwork skills.
- Expert level knowledge of PowerShell.
- Knowledge of SDLC methodologies.
- Knowledge of ITIL and ITSM methodologies.
- Windows Expert and working knowledge of Linux Operating Systems.
