Cybersecurity Engineer

Security Engineering

• Select, implement, and support security tools and systems for preventative, detective, and analysis purposes.
• Conduct regular security assessments, red/purple team pen-tests with external vendors and with internal tooling.
• Provide high-level security engineering across application security, network security, cloud security and infrastructure security domains.
• Design, implement, and monitor security controls against CIS v8.1 /NIST CSF 2.0.
• Develop advanced threat hunting and analytic rules, playbooks, connectors and automations. Build in advanced threat intel into detection rules and analytics.
• Manage SIEM and alerting, being the last line of escalation for alerts, leading investigations alerting across all security stack products.
• Review new projects and designs for appropriate security policies, procedures, and controls.  Assist with the design of security environments for new and existing systems.
• Respond to security incidents as a first responder, lead the resolution of security issues, and perform forensic analysis post resolution.  Provide analysis and recommendations to prevent or mitigate future incidents, and work with all teams necessary to implement the recommendations.
• Research new vendor offerings and industry trends and recommend new software, process, and policy solutions.
• Create and maintain a security framework, security roadmap, security awareness program, security architecture design and documentation, and technical standards, policies, and guidelines related to security.
• Lead the security portion of regulatory and internal audits.
• Prepare and present written and verbal security reports, analysis, and summaries to the CEO and executives.
• Automate routine work and alerting.