Cyber Security Engineer

Academy Sports + Outdoors•Katy, TX

1d•Onsite

About The Position

The Cyber Security Engineer protects enterprise systems, applications, identities, networks, and cloud environments through security controls and ongoing analysis. The role administers data loss prevention (DLP) solutions across cloud and on-premises environments, detects data exfiltration activity, and manages Cloud Access Security Broker (CASB) policies. It develops controls and recommendations to help protect enterprise technology and public-cloud assets. The position designs and supports identity and access management solutions, troubleshoots security-related network and connection issues, and serves as an IT security subject matter expert on business and IT projects. It supports vulnerability management and remediation, performs threat analysis and modeling, reviews web and mobile application security, investigates incidents and technical issues, and develops cloud-security recommendations. The engineer works with business and IT teams and the IT Security and Compliance team to deliver security solutions, coordinate concurrent projects, and support enterprise remediation. The role also documents project requirements, defines key performance indicators, reports project progress, and communicates technical information to non-technical audiences. Regular in-office attendance is required.

Requirements

Bachelor's degree in Information Technology or a relevant field.
At least 3 years of information security experience in an enterprise environment.
Experience administering and managing enterprise-wide data loss prevention on-premises and in the cloud.
Experience designing, developing, managing, supporting, and maintaining a Cloud Access Security Broker.
Experience configuring and installing security devices and services such as firewalls, VPN, IPS/IDS, and SIEM.
Experience administering and managing endpoint security, threat management solutions, and firewalls.
Experience with at least one programming or scripting language, such as Java, JavaScript, Python, or Go.
Experience with Single Sign-On, password reset, self-service, federated identity, multi-factor authentication, and IAM products and services, including Identity as a Service.
Working knowledge of database, networking, virtualization, and server hardware concepts.
Foundational knowledge of Windows, Linux/Unix, and iSeries AS400 operating systems.
Significant experience designing and implementing security solutions.
Demonstrated experience configuring and managing host and network data loss prevention tools.
Strong experience with endpoint protection, vulnerability management tools, malware prevention tools, and antivirus solutions.
Demonstrated experience configuring and managing security controls for cloud environments and IaaS, PaaS, and SaaS platforms.
Thorough understanding of network protocols, network traffic analysis, firewalls, intrusion prevention systems, proxies, PKI, and HSMs.
Ability to analyze security system logs, security tools, and data.
Ability to work with different teams on concurrent projects.
Ability to document project requirements, define KPIs, and produce reports showing project progress.
Ability to communicate technical information to a non-technical audience.
Strong interpersonal, written, and verbal communication skills for working effectively with individuals at various levels.
Thorough working knowledge of Windows Server 2008, 2012, and 2016, Unix, Mac, and Windows 10.
Ability to remain organized, pay attention to detail, and meet critical deadlines.
Analytical approach with strong problem-solving and creative resolution skills.
Ability to work well under pressure while consistently meeting time-sensitive deadlines.
Advanced understanding of incident management and vulnerability remediation, with strong technical investigation and problem-solving skills.
Team-first attitude and willingness to step in where needed.
Regular in-office attendance.
Acceptable hearing and vision to perform job duties.
Ability to adhere to company policies and professional standards.

Nice To Haves

Experience with application support and system troubleshooting.
Industry certifications in areas such as AWS, GCP, Azure Cloud, Certificate of Cloud Security Knowledge, CISSP, CEH, CCNA, or CompTIA Cloud+.

Responsibilities

Protect enterprise systems, applications, identities, networks, and cloud environments using security controls and ongoing analysis.
Administer data loss prevention solutions across cloud and on-premises environments and detect data exfiltration activity.
Manage Cloud Access Security Broker policies and develop recommendations and controls for enterprise technology and public-cloud assets.
Design and support identity and access management solutions.
Troubleshoot security-related network and connection issues.
Serve as an IT security subject matter expert for business and IT projects and initiatives.
Support vulnerability management and remediation, perform threat analysis and modeling, and review web and mobile application security.
Investigate security incidents and technical issues.
Collaborate with business and IT teams and the IT Security and Compliance team to deliver holistic security solutions.
Coordinate concurrent projects and support remediation efforts across the enterprise.
Document project requirements, define key performance indicators, produce project-progress reports, and communicate technical information to non-technical audiences.