Cybersecurity Engineer I (Contract Talent)

Robert Half•San Ramon, CA

16d•$34 - $51

About The Position

Robert Half, one of FORTUNE’s World’s Most Admired Companies and a Fortune 100 Best Companies to Work For is hiring for a Cybersecurity Engineer I (Contract Talent) to join the Information Security Services department. The Cybersecurity Engineer I develops and implements enterprise information security architectures and solutions for basic to medium complexity projects. This role serves as a security expert in application development, database design, network, and platform efforts, helping project teams comply with enterprise and IT security policies while reducing company risk factors. The position plays a critical role in incident response activities and supports the team in developing secure solutions that meet security requirements and industry best practices.

Requirements

Enrolled in an accredited undergraduate university in related field or equivalent experience.
Ability to communicate in-depth business processes to technical resources.
Ability to create complex process flow diagrams or flowcharts that demonstrate business or system process flow.
Working knowledge and direct experience managing complex security issues.
Ability to gather, combine and document requirements effectively to propose secure solutions.
Ability to perform fit/gap analysis based on requirements, create detailed and complex test plans and prioritize job responsibilities.
Ability to write complex queries and reports.
Ability to develop and manage project plans, meeting established deliverables and timelines.
Ability to create thorough and complex documentation, gather information and present status.
Ability to use good judgment and think outside the box in addressing unique information security challenges.
Ability to make sense of large security data sets using creative and out of the box thinking; experience with Data Analytics.
Ability to think independently and in team setting to ensure security issues are addressed in a manner consistent with security principles in mind.
Possess a security mindset.

Nice To Haves

Security+ license or certification a plus.
Working knowledge and experience working with cloud-based solutions and environments (IaaS, SaaS, PaaS), Security related technologies and solutions (firewalls, IPS, WIDS, WAF, SIEM, DLP, RMS, vulnerability scanner, web proxy, endpoint security, etc.).
Network Security experience is a plus, working experience and understanding of the SDLC.

Responsibilities

Design and implement operationally ready, best practices security solutions (tools and services) for basic to medium complexity projects to mitigate security threats and risks that may impact the business in areas including SIEM, Firewall, WIDS, WAF, DLP, RMS, Web proxy, Vulnerability scanning, and Virus/Malware management.
Support team and vendors in developing secure solutions to support business needs and to provide security review and certification to ensure best practice and quality delivery of all technical solutions that meet security requirements.
Execute technology refresh according to product roadmap and industrial best practices.
Assist with developing and maintaining an effective security analytics platform using tools such as Hadoop and/or Splunk to provide better security intelligence.
Assist with audits by documenting and demonstrating controls.
Play a critical role in the technical coordination and remediation of any needed incident response activities required during each Security Incident Response event.
Assist with technical assessments and research of computer related security incidents, including malware analysis, fraud detection packet level analysis, and system level forensic analysis to ensure the continuing development of security protection technology as it relates to defending and protecting RHI and its customers.
Assist with assessment of severity levels of security threats (e.g., incidents, vulnerabilities, malicious code) and coordinate the appropriate notifications or escalations in a timely manner to Director, Information Security.
Act as an escalation point to provide technical guidance to Security Operations when processing moderately complex user requests (via ServiceNow).
Document and implement mitigation strategies for vulnerabilities discovered that may impact the company.
Articulate vulnerabilities, application defects, technical controls, risks, and other complex security matters with the Business in an easily understood manner.
Administer and monitor security profiles, review security violation reports and investigate possible security exceptions, updates; maintain and document security controls.
Participate in the evaluation of products and/or procedures to enhance productivity and effectiveness.
Support team and vendors to gather external project requirements as directed.
Collaborate with development teams to conduct Application Security assessments.
Support team in providing consultancy to internal customers on risk assessment, threat modeling, and fixing vulnerabilities.
Work overtime as needed.
Act as an on-call contact outside regular working hours as needed.
Remain accessible via assigned communication device as needed.
Travel as needed.
Work at various locations as needed.
Work a nonstandard schedule as needed.
Work evening or night shift hours as needed.
Provide coverage for other positions, shifts, or functions as needed.