Full-Time Staff Cyber Security Engineer

• Conducting end to end security and threat analysis of enterprise initiatives involving new or modified technology deployments.
• Ensuring that they incorporate Information Security best practices and guidelines into system designs.
• Functioning as a technical and engineering subject matter expert across various Cyber Security technology areas with a focus on network, application, cloud, and enterprise security controls.
• Collaboration across the Cyber organization, partnership with business stakeholders, and will result in security guidance and/or mitigation requirements.
• Effectively communicate the importance of key Cyber programs and services to obtain support, trust and buy-in from the business.

• 8+ years of experience partnering with business and technical teams to architect and deliver Cyber solutions
• 8+ years of experience consulting with business teams regarding threat mitigation best practices in one or more technical areas (Perimeter Security, Application Security, Core Systems, EDR, Cloud etc.)
• Ability to explain common threats to components including Network, Cloud, Web and Application environments
• Knowledge of best practices in the Cyber Security industry, including OWASP Top 10 and CWE/SANS Top 25
• Advanced technical knowledge in at least one of the above listed Cyber security areas, highlighting your ability to navigate complex challenges
• Strong written/verbal communication and presentation skills with the ability to tailor to both technical, and non-technical audiences
• Experience developing and documenting security guidelines or security best practices
• Experience using diagramming tools to communicate secure designs and controls
• Excellent time management skills to appropriately prioritize multiple concurrent projects

• Experience performing Threat Analysis and modeling leveraging best in industry frameworks such as MITRE ATT&CK
• Familiarity with security controls such as Cloud Security Matrix, NIST CSF, CIS Critical Security Controls
• Understanding of various data and privacy regulations, including PCI DSS, SOX, HIPAA, GDPR, CCPA
• In depth knowledge of common Cloud Services offered (IaaS, PaaS, SaaS)
• A firm understanding of Cybersecurity Engineering/Operations, Incident Response, and GRC functions

What is the last date for applying to the job?

Which countries are accepted for this remote job?