EIC Information Security Operations Engineer Intern

Cushman & Wakefield

4d•Onsite

About The Position

Cushman & Wakefield is a global commercial real estate services leader with 52,000 professionals worldwide. Selected Candidate works within the Security Operations Center to improve, tune, and enhance security alerts, responses, and remediation of detected issues. The engineer will also work within the Incident Management process to remove threats and vulnerabilities within the organization. This role collaborates with other Information Security and IT Operational teams to maintain a secure environment and incident response capabilities. As part of the Global Security Operations Center team, he/she should be responsible for improving security operations and monitoring security events in EDR, permitter scanning, threat detection, preventative advanced threat hunting, across all security tools.

Requirements

Junior or Senior pursuing a Bachelor’s or Master’s degree in Computer Science, Engineering, Information Systems, Cybersecurity, or a related degree.
Energetic and a quick learner.
Good communication skills with a positive attitude.
A willingness to learn new technology.
Experienced in incident response lifecycle and SLAs.

Nice To Haves

Experience responding to security incidents in enterprise environments, with a deep understanding of the Incident Response cycle.
Deep understanding of Cybersecurity concept, principles, and best practices.
Knowledge of Security framework and standards (eg NIST).
Comprehensive understanding of technical architectures including networking, application and system architecture, web technology, and common internet and ICS protocols.
Knowledge of Windows and MAC Operating Systems and their security features.
Understanding compliance requirements.
Experience with administrating or architecting solutions in Zscaler CrowdStrike Mimecast Wiz MS Defender.
Emphasis on Identity, setting up and analyzing Conditional Access Policies.
Experienced operating as an administrator across security platforms and executing changes per the Security Architecture groups design.
Direct long-term tracking and analysis of Advanced Persistent Threat (APT) actors, including TTPs, infrastructure, and campaign evolution, to inform risk models and defense strategies.
Guide the implementation of threat hunting methodologies using SIEM, EDR and advanced telemetry to surface adversarial tactics, techniques, and procedures across the enterprise.
Sponsor and oversee the use of statistical, spatial, and qualitative threat modeling.
Expert level understanding of standard risk classification schemes including CVSS.
Strong organization skills and effective communication on risk with experience presenting to an executive audience.
Mastery of cybersecurity core concepts & terminology, including the vulnerability management lifecycle, typical risks and risk management approaches, customer expectations and behavior.
Composure and clear thinking during high pressure situations.
Capable of performing technical and business risk analysis on cybersecurity issues.
Abilities to analyze problems, ask questions, and come up with potential solutions within the confines of our security standards.
Ability to work in multiple areas but track through issue resolution.
Experience in security domain with exposure to tools such as CrowdStrike, ZScaler, Palo Alto, Mimecast, MS Defender is a plus.
Highly skilled and knowledgeable within the Microsoft environment and toolset.
Any Security Certification is an added advantage.

Responsibilities

Serves as the regional point of contact for security escalations/requests and escalates requests to Security architecture as needed.
Responsible for the identification and assessment of enterprise risks.
Identifies, evaluates, and tests appropriate security products, tools, and systems to ensure alignment with the CushWake global security posture.
Articulates security policies, guidelines and standards to customers and developers.
Able to apply theories, concepts, principles, and methodologies to difficult but conventional assignments.
Works independently within an established framework.
Develop techniques and procedures for conducting IS and cyber security risk assessments and compliance audits, the evaluation and testing of hardware, firmware, and software for possible impact on system security, and the investigation and resolution of security incidents.
Implement IS and cyber security policies and take measures against intrusion, frauds, attacks, or leaks.
Continue to build knowledge of the organization, processes, and customers.
Performs a range of straightforward assignments.
Use prescribed guidelines or policies to analyze and resolve problems.
Receives a moderate level of guidance and direction.
Partners with Security Architecture on critical scope delivery.
Reviews security INC(s) to ensure proper processes have been followed and to identify additional IoA(s)/IoC(s).
Perform proactive threat hunting using hypothesis, and telemetry from endpoints, identities, cloud and network to identify malicious activity, abnormal behaviors, and emerging attacker techniques.
Serves as the security stakeholder for IR/MIM activities until Security Architecture and/or senior leadership can engage.