Cyber Security Engineer-HYBRID
Cyber Security Engineer-HYBRID
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
Under the general guidance of the IT/Security Architect or Systems Manager the candidate will be responsible for evaluating and implementing new technologies yzing cybersecurity related components and controls ociated to the product process and solution and identify and resolve potential issues to help enhance and secure a large enterprise network. The position requires a broad foundation of IT/Security architectural experience with an understanding of Internet server/storage technologies cloud services/integrations are a must. The candidate will be responsible for designing complex and innovative solutions addressing vulnerability detection threat and risk ysis network intrusion securing technology ets across the application infrastructure cloud and data tiers and development/implementation of vulnerability mitigation strategies. This is a handson team member who actively works with various teams including security infrastructure and development teams to improve our overall security standards. This position is expected to be the last level of technical escalation within the company for the igned responsibilities.
Guides Cyber Governance and Information Protection team and makes informed security decisions on the design of infrastructure systems and applications.
Works with tech leads and teams to ensure security is built into app development network infrastructure and cloud systems. Work with necessary Information Technology groups to satisfy specific technology related issues. Act as an Information Security liaison between the customers and all groups in Information Technology
Implements industry leading practices around cyber risks and Cloud security and perform security essments of cloud platforms/environments using industry standard frameworks such as ISO CSACSM and NIST
Designs and develops security policies standards and procedures e.g. firewall rules SSL/IPSec security incident and event management (SIEM) data protection (DLP encryption) user account management (SSO SAML) and pword/key management.
Identifies software weaknesses that could lead to exploitable vulnerabilities such as SQL injection crosssite scripting crosssite request forgery buffer overflows use of hardcoded pwords weak encryption sensitive data.
Seasoned professional with detailed technical knowledge of techniques standards and stateofthe art capabilities for authentication and authorization applied cryptography security vulnerabilities and remediation. Can advise on architecture decisions at technical and product level.
Adequate knowledge of web related technologies (Web applications Web Services and Service Oriented Architectures) and of network/web related protocols.
Experience working with Cloud security posture management tools.
Constantly looking for better ways of solving security problems and designing the solution not afraid of challenging the status quo.
Respond swiftly to all alerts performing initial risk/impact essments or escalating issues as appropriate
Follow change management controls and guidelines.
Support operating organizations during corporate emergencies. Participate in the Companys emergency management processes cyber security and storm plans.
Perform other related tasks and ignments as required.
Ss & Requirements
- Antivirus
- EDR
- IDS/IPS profiles
- Implemented vulnerability management
- IPS Management
- Manage vulnerabilities
- SIEM
- Must be comfortable and sed at driving information security processes and techniques. Must be able to communicate designs and give persuasive presentations. Must be able to interact with all levels of management and communicate technical concepts to a nontechnical audience.
- Ability to handle multiple ignments with changing priorities while meeting deadlines.
- Must be flexible and able to work offhours as required to support deployments resolve production problems or respond to corporate emergencies.
- Ability to elish medium and longterm plans and priorities and estimate investment requirements.
- Minimum 5 years of handson experience working in cyber security and related discipline.
- Minimum 5 years of handson experience in designing developing implementing secure architectures and/or processes.
- Experience with implementing or integrating commercially available infrastructure components.
- Experience in evaluating technology and elishing standard designs.
- Must be conversant in emerging technologies and practices such as cloud computing.
- Familiarity with security vulnerability management products process and industry best practices
- Familiarity of security infrastructure and application ets to design and implement Cybersecurity controls and designs.
The following are not required for this position but would be considered as a valuable et in a potential candidate.
- Knowledge in OT/ICS protocols.
- Technical certifications (e.g. AWS Certified Solutions Architect Cloud Certified Professional Microsoft Cloud Certifications CISSP CISM CIPP GCIP etc.). are preferred but not mandatory. Experience in Agile Development with specific Security Architect (or similar) experience preferred. Knowledge of security tools is preferred.
Employment Type
Full Time
