Security Engineer

We are looking for a capable System Security Engineer, who enjoys security work and possesses both deep and wide expertise in the security space. In this role, candidates will maintain responsibility for monitoring and detecting threats and cybersecurity attacks. Work independently as well as with other members of the SOC team to analyze system and security events, threat and vulnerability advisories, and cyber threat intelligence to identify malicious activity and potential attacks to alert internal clients to prevent or respond to incidents. Monitor network and system security events, conduct threat hunting through event data and activity logs, develop alarms for suspicious or malicious activity, escalate alerts to internal and external clients, and prepare reports to summarize detected activities. Execute and assist with creating operational processes for consistent monitoring of client environments. Work to support an Incident Response Team by conducting monitoring and analysis during incident management engagements. You will make things more secure by protecting system boundaries, keeping computer systems and network devices hardened against attacks and securing sensitive data. Qualified candidates will have a background in Security or Systems Engineering.

(Remote position)

General Accountabilities

• Engineer, implement and monitor security measures for the protection of computer systems, networks, and information.

• Identify and define system security requirements.

• Design computer security architecture and develop detailed cyber security designs.

• Prepare and document standard operating procedures and protocols.

• Configure and troubleshoot security infrastructure devices.

• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.

• Ensure that the company knows as much as possible, as quickly as possible about security incidents.

• Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement.

• Evaluate the ability of each of our third-party service providers to protect client or firm data to which we have permitted them access.

• Researches and maintains a thorough understanding of the latest security standards, systems, products, practices, and protocols.

• Liaise with teams to ensure all security hygiene items are actioned accordingly.

Job Qualifications

Education:

• Bachelor's degree preferred.

• ITSM foundation training required.

• Cyber security certifications are a plus.
  
  

Technical Skills:

• 3+ years in Cyber Security Engineering role with extensive knowledge of IT landscapes.

• Proven work experience as a System Security Engineer or Information Security Engineer.

• Experience in building and maintaining security systems.

• Detailed technical knowledge of database and operating system security.

• Hands on experience in Security Systems: including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.

• Experience with Network Security and Networking Technologies and with system, security, and network monitoring tools.

• Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols.

• Experience with Windows & UNIX-based operating systems, and networked environments.

• Knowledge of LAN/WAN design and general internet-working technologies.

• Knowledge and experience working with next gen AV EDR (Endpoint Detection and Response) Examples= Cisco Secure Endpoint, CrowdStrike, Sophos, etc.

• Knowledge of Cisco Umbrella (SIG) technologies is a plus.

• Knowledge of MS Sentinel (SIEM) and other SIEM technologies.

• Knowledge of Qualys and other vulnerability management scanners.

• Knowledge of Microsoft Security suite (Azure AD, Azure Identity Protection, Microsoft Defender for Endpoints, Microsoft Defender for Cloud, Microsoft Defender for Cloud Apps, Microsoft Defender for O365.

Professional Skills

• Fluent English language skills required: verbal and written communication.

• Have strong inter-personal and communication skills: capable of training users in complex topics and making presentations to internal groups. 

• Able to write intricate system and user documentation. Capable of writing and explaining purchase justifications.

• Experience collaborating with multicultural teams and customers.

• Initiative-taking and disciplined.

• Strong stakeholder relationship management skills.

• Strong investigative and analysis skills.

• Strong technical and process design and implementation skills.

• Experience defining, creating, and managing procedures.

• Participate in a rotating 24/7 schedule responding to critical issues.