Cybersecurity Engineer

Big-D Companies•Salt Lake City, UT

52d•Onsite

About The Position

Big-D Construction is looking for a Cybersecurity Engineer to join our team of professionals based in Salt Lake City, UT. The Cybersecurity Engineer is responsible for securing and protecting the organization's digital assets. This critical role involves implementing, maintaining, and supporting the design of robust security measures to safeguard the network, systems, and data. They work collaboratively within a solution-oriented IT department, providing support to various business units to ensure that security practices align with business needs. This position requires a proactive approach to identifying and mitigating security risks, providing guidance on best practices, and staying updated on the latest cybersecurity trends and technologies. This position plays a pivotal role in maintaining the integrity and confidentiality of the digital infrastructure, contributing to the overall security posture of the organization.

Requirements

Bachelor's degree in Computer Science (CS), Information Technology (IT), Information Systems (IS), or a related field, or equivalent experience.
Relevant certifications such as CompTIA Security+, CISSP, CEH, or equivalent.
5+ years of hands-on experience in cybersecurity or a related field, with a focus on network security, threat analysis, and incident response.
5+ years of implementation and managing experience with Fortinet infrastructure in a multi-location environment, or 3+ years experience and NSE4
5+ years working in a Windows AD/Azure Hybrid environment
Understanding of Microsoft Sentinel and KQL queries, or equivalent SIEM technology
Hands-on experience implementing and managing Defender for Endpoint, or equivalent EDR tools
Experience implementing and managing Defender for Cloud Apps
Experience creating and managing Azure Conditional Access policies
Experience managing email security and filters
Good time management skills
Excellent attention to detail
Works well in a team environment
Excellent troubleshooting skills
Good communication skills in a customer service environment
High level of ethics and confidentiality

Responsibilities

Assist in the design of security measures to protect the organization
Monitor and investigate security alerts, incidents, and anomalies
Understand MITRE ATT&CK framework and threat detection methodologies
Stay current on CVEs and CVSS scores related to company infrastructure
Analyze and conduct vulnerability scan reports using Nessus and apply required remediations
Implement and maintain security measures using tools such as firewalls, Email filters, Extended Detection and Response (XDR), and security information and event management (SIEM) systems to protect the organization's digital assets.
Implement and maintain Fortinet network infrastructure that includes Fortigate NGF, Fortiswitch, FortiAP, Fortianalyzer, Fortimanager, and Fortiauthenticator.
Monitor and analyze network activity and performance using tools like Wireshark and appropriate performance measuring tools
Address and mitigate security breaches.
Participate in software implementation tasks to enhance security measures.
Collaborate with cybersecurity consultants, corporations, and government agencies to enhance the organization's security infrastructure.
Ensure compliance with industry standards and regulations for cybersecurity, measured by regularly performed assessments.
Develop and maintain comprehensive documentation on security policies, procedures, and best practices.
Provide training and guidance on cybersecurity practices to employees through workshops and training sessions.
Troubleshoot and resolve security issues, providing technical support to ensure minimal disruption to business operations.
Stay updated on the latest cybersecurity trends and technologies, recommending appropriate solutions to enhance the organization's security posture.
Collaborate with various business units and department leaders to align security practices with business needs and regulatory requirements.
Occasionally be available outside of standard operating hours as necessary to address urgent security issues.
Occasionally travel to remote offices and job sites to conduct security assessments and provide support.
Perform other duties as assigned by the manager and IT Leadership to support the overall security strategy of the organization.