Cyber Security Engineer

• Service/Support Desk (managing tickets, working with users) experience is strongly preferred.
• Risk Assessment - Perform risk assessments, business impact analysis, cloud services assessments, security control audits, software/application development audits and licensing audits.
• Incident Response - Prepare for incidents, incident response planning, detect incidents, respond to incidents, investigate incidents, incident reporting, mitigation, lessons learned. Use of ServiceNow or other workflow management tools desired.
• Security Operations Center (SOC) - Worked in or directly with a SOC using tools such as Cyber Protect, ServiceNow, or Splunk.
• Cyber Security Training - Provide training on various Cyber Security topics, developing cultural awareness campaigns with topics such as phishing, social engineering, and access control.
• Cryptography - Familiar with encryption and file hashing technologies. Ability to securely send and receive data over networks while minimizing exposure to threats and vulnerabilities. RSA Multifactor Authentication experience highly desirable.
• System and Network Administration - Windows, Linux nice to have (Oracle, Red Hat), Cisco, and Operational Technology (OT) and SCADA experience is nice to have.
• Familiarity with Security Information and Event Management (SIEM) is nice to have - Manage various components of Splunk Enterprise on a daily basis, including license management, indexers, search heads, configuration files, monitoring, and getting data into Splunk.
• Vulnerability Assessment and Remediation - Assess enterprise systems for vulnerabilities and recommend plans of action and milestones to remediate those vulnerabilities. Harden new and legacy systems against unwanted changes, simplify compliance processes, and provide protection for corporate systems utilizing Carbon Black, Proofpoint, Stealthbits, Stealthwatch, CyberArk, Forcepoint and CoSoSys Endpoint Protector.
• Demonstrates initiative and has a willingness to learn new technologies.

• CompTIA Security + required
• CISSP or CISM preferred
• CCSA or CCSE certification highly desirable
• Familiarity with SIEM

Education:

• Bachelor’s Degree or equivalent experience required

Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.