Cyber Security Engineer

Academy•Katy, TX

4d•Onsite

About The Position

The Cyber Security Engineer protects enterprise systems, applications, identities, networks, and cloud environments through practical security controls and ongoing analysis. The role administers data loss prevention solutions across cloud and on-premises environments, detects data exfiltration activity, manages Cloud Access Security Broker policies, and develops controls and recommendations that help protect enterprise technology and public-cloud assets. The position designs and supports identity and access management solutions, troubleshoots security-related network and connection issues, and serves as an IT security subject matter expert for business and IT projects. Work includes supporting vulnerability management and remediation, performing threat analysis and modeling, reviewing web and mobile application security, investigating incidents and technical issues, and developing cloud-security recommendations. The engineer partners with business and IT teams, communicates technical information to non-technical audiences, documents project requirements, defines key performance indicators, and produces project-progress reports. The role coordinates concurrent projects and supports enterprise remediation efforts as part of the IT Security and Compliance team. Regular in-office attendance is required.

Requirements

Bachelor's degree in Information Technology or a relevant field.
At least 3 years of experience working in information security in an enterprise environment.
Experience administering and managing enterprise-wide data loss prevention on premises and in the cloud.
Experience designing, developing, managing, supporting, and maintaining a Cloud Access Security Broker.
Experience configuring and installing security devices and services such as firewalls, VPN, IPS/IDS, and SIEM.
Experience administering and managing endpoint security, threat management solutions, and firewalls.
Experience with at least one programming or scripting language, such as Java, JavaScript, Python, or Go.
Experience with Single Sign-On, password reset, self-service, federated identity, multi-factor authentication, and IAM products and services, including Identity as a Service.
Working knowledge of database, networking, virtualization, and server hardware concepts.
Foundational knowledge of Windows, Linux/Unix, and iSeries AS400 operating systems.
Significant experience designing and implementing security solutions.
Demonstrated experience configuring and managing host and network data loss prevention tools.
Strong experience with endpoint protection, vulnerability management tools, malware prevention tools, and antivirus solutions.
Demonstrated experience configuring and managing security controls for cloud environments and IaaS, PaaS, and SaaS platforms.
Thorough understanding of network protocols, network traffic analysis, firewalls, intrusion prevention systems, proxies, PKI, and HSMs.
Ability to analyze security system logs, security tools, and data.
Ability to work with different teams on concurrent projects.
Ability to document project requirements, define KPIs, and produce reports showing project progress.
Ability to communicate technical information to a non-technical audience.
Strong interpersonal, written, and verbal communication skills to work effectively with individuals at various levels.
Thorough working knowledge of Windows Server 2008, 2012, and 2016, Unix, Mac, and Windows 10.
Ability to remain organized, pay attention to detail, and meet critical deadlines.
Analytical approach with strong problem-solving abilities and creative resolution skills.
Ability to work well under pressure while consistently meeting time-sensitive deadlines.
Advanced understanding of incident management and vulnerability remediation, with excellent technical investigation and problem-solving skills.
Team-first attitude and willingness to step in where needed.
Regular in-office attendance.
Acceptable level of hearing and vision to perform job duties.
Ability to adhere to company policies and professional standards.

Nice To Haves

Experience with application support and system troubleshooting.
Industry certifications in areas such as AWS, GCP, Azure Cloud, Certificate of Cloud Security Knowledge, CISSP, CEH, CCNA, or CompTIA Cloud+.

Responsibilities

Protect enterprise systems, applications, identities, networks, and cloud environments through security controls and ongoing analysis.
Administer enterprise data loss prevention solutions across cloud and on-premises environments and detect data exfiltration activity.
Design, develop, manage, support, and maintain Cloud Access Security Broker solutions and policies.
Develop security controls and recommendations for enterprise technology and public-cloud assets.
Design and support identity and access management solutions.
Troubleshoot security-related network and connection issues.
Serve as an IT security subject matter expert on business and IT projects and initiatives.
Support vulnerability management and remediation across the enterprise.
Perform threat analysis and modeling and review web and mobile application security.
Investigate security incidents and technical issues.
Develop cloud-security recommendations and collaborate on controls that provide enterprise coverage.
Partner with business and IT teams and communicate technical information to non-technical audiences.
Document project requirements, define key performance indicators, and produce reports showing project progress.
Coordinate concurrent projects and collaborate with the IT Security and Compliance team to deliver holistic solutions.