Cyber Security Principle

CWT • Minnetonka, MN

1d

About The Position

The Cyber Security Principle is a subject matter expert in cyber security defense and detection to design (in coordination with the Information Security Engineering Team) and execute best-in-class Network Monitoring, Preventative and Detective Controls, Forensics and Investigations, Security Awareness (in coordination with the Information Security Assurance Team), Security Vulnerability Management and Cyber Threat Intelligence activities. The Information Security Operations Principle will play a key role leading in coordination with the Incident Response Team during incident and crisis response. In addition supports all aspects of a security event monitoring and response team. Seeks continuous improvement of security events and proactively oversees research to identify emerging threats. The Principle is both operationally-focused in the defense of CWT's network, and strategically position the organization in preparation for increasing complexity and emerging threats through best practice tool optimization. The Principle will produce weekly and monthly reports identifying trends and enhancements aligned with security posture and positioning.

Requirements

• Bachelor's Degree in Computer Science or related field or equivalent experience
• Certified Information Systems Security Professional (CISSP) and/or Certified Cloud Security Certification (CCSP)and/or AWS certifications (or ability to obtain within 6 months
• 5-10 years of hands on experience in all technical security domains
• Strong technical background and great understanding on emerging security trends
• Background and style that elicits respect in the organization through management style, technical depth, customer service and results
• Ability to influence others where there is no direct authority
• Deep technical knowledge IT Network, Infrastructure, Software, Cloud, Mobile
• -Scripting, coding, or automation skills (Python, Perl, Java, .NET)
• In-depth experience developing content in enterprise SIEM (Security Information and Event Managers) platforms
• Knowledge of adversary activities in cyber security with an understanding of intrusion set tactics, techniques, and procedures
• Excellent verbal and written communication skills.

Responsibilities

• Oversee network traffic and security events to identify malicious activity.
• Enterprise-level experience performing incident triage, analysis, incident response, and remediation for computer network intrusions, web application and server attacks, insider threats, and malware infections.
• Coordinate with other members of the Cyber Security Services Team to ensure team cohesiveness.
• Coordinate with Business Unit and Corporate teams to provide remediation recommendations and mitigate security threat findings.
• Provide thoughtful leadership on current and future cyber security initiatives.
• Oversee the development and document policies and procedures.
• Lead Cyber Security Incident Handling when necessary.
• Provide audit and compliance request from internal and external entities with data as needed.
• Provides support for security-related projects as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees