CYBER SECURITY ENGINEER III Business & Information Technology Hours: M-F 8-5 Day Shift - Full Time Paygrade/Wages/Salary Info: EX E40 - 47.2500 - 59.3500
Cyber Security Engineer III # Position Highlights: ##########This position requires the person to have strong technical skills in various computer operating systems, scripting languages, and cyber security experience across various platforms and applications. Excellent oral and written communication skills are essential in addition to strong problem-solving skills. This position requires the person to be quickly adaptable to the changing threat landscape of cyber security and can respond to after hour emergencies when the need arises. This is a journeyman level position that requires no supervision to carry out the position responsibilities. ##########Job responsibilities can include creating and maintaining security controls for applications of systems, performing threat simulations to detect possible risks, and providing security recommendations. The position may instruct other teams on proper coding methods and also investigate, create, and recommend innovative technologies or other methods that will enhance the security of various technology environments. # Responsibilities:## ##########Lead security reviews and assessments and conduct decision making in the deployment of security controls ##########Manages and supports various cyber security monitoring and auditing activities ##########Leads/Co-leads the Cyber Incident Response Team when activated ##########Identifies and recommends appropriate cost-effective security controls ##########Reviews and recommends and assists in implementing innovative solutions to improve cyber security ##########Assists with policy, procedure, and process review, editing, and writing ##########Occasional travel to attend security forums, trainings, and/or conferences ##########Assists and occasionally guides and periodically supervises other Cyber Security team members # # Credentials and Qualifications: ##########Bachelor#s degree # Computer Science, Computer Engineering, Information Systems or Cyber ##########Seven plus (7+) years directly related to Information/Cyber Security. Three (3) years can be substituted for experience by holding the CISSP certification or holding a Master#s degree in the Cyber field. This experience must show evaluation and deployment of security practices as well as monitoring and auditing of implemented security controls. ##########Knowledge of web application security, browser security models, and application security vulnerabilities such as the OWASP Top Ten ##########Security testing methodologies, tools, and techniques # understanding of common cloud and application security vulnerabilities and controls to remediate these weaknesses ##########Deep understanding of network attacks, DDoS, Phishing, email protocols/security/spam, encryption, authentication, logging and log analysis, IP and device reputation, and security rules and policies ##########Strong verbal and written communication skills, solid team player, with demonstrated abilities in analysis and problem-solving ##########Self-motivated with the ability to work independently and as a team member with minimal direction ##########Employ influencing skills to obtain buy-in and participation from various groups and stakeholders without direct control ##########Build and maintain collaborative relationships with partners, clients and peers ##########Excellent problem-solving abilities and analytical skills. Ability to see the big picture with high attention to critical details Preferred: ##########Master#s degree-# Computer Science, Computer Engineering, Information Systems or Cyber ##########Can demonstrate active participation on a Computer Security Incident Response Team (CSIRT). ##########Professional Security Certifications: CCSP, CISA, CISM, CCFP ##########Strong knowledge of industry standards as they relate to Cloud and Application security management to include ISO, NIST, and Cloud Security Alliance (CSA) ##########Exposure to agile development, DevOps, SecOps and scrum teams ##########Hands-on-experience with SIEMs, Penetration Testing tools, Deceptive tools, Firewalls