Senior Cyber Security Engineer

ea774d00-96ec-4432-b137-9f604cbb5c8e•Wildwood, FL

22h•Onsite

About The Position

This position focuses on security, regulations, and compliance related to the business and its clients while delivering customer service to internal and external customers. It is a full-time, on-site role responsible for cybersecurity operations, threat and vulnerability assessments, security solution evaluation and implementation, incident response, forensic analysis, reporting, and Tier II support. The role also coordinates with the Network division, the Security and Compliance Administrator, law enforcement, customer legal representatives, and the Director of Cyber Security as needed.

Requirements

Associate degree (A.A.) or equivalent, and/or five years of related experience and/or training, or an equivalent combination of education and experience.
At least one of the following Microsoft certifications or current equivalents: MTA, MCSE, MCSA, or MCITP.
At least one of the following certifications or an equivalent: CompTIA Security+, GIAC Security Essentials, CEH, CISSP, or CISM.
Ability to demonstrate and apply understanding of web content filters/proxies, email security capabilities, IDS, IPS, SIEM, DNS security practices, advanced log analysis, network monitoring, network flow analysis, packet capture analysis, network proxies, firewalls, antivirus capabilities, Linux/UNIX command line, and access control lists.

Responsibilities

Proactively monitor and respond to threat indicators and incidents using SOC software and tools, including antivirus, vulnerability management, IDS/IPS, SIEM, DLP, and threat intelligence systems.
Perform physical and virtual threat and vulnerability assessments across datacenter, cloud, network, server/desktop, BYOD, and IoT environments.
Research detected threats and investigate additional indicators of compromise using malware analysis, sandboxing, VirusTotal, and related methods.
Create documentation of new and existing system designs for compliance with security standards and best practices.
Research, recommend, evaluate, document, and implement cybersecurity solutions to identify or protect against threats and respond to incidents.
Stay informed about current and emerging technology threats, including threats specific to The Villages or its customers, through research and testing.
Develop and document proactive threat-detection and mitigation methods using threat intelligence, honeypots/traps, IDS, and related approaches.
Continually evaluate, test, and recommend tools and security products to protect systems.
Review, recommend, document, and implement Active Directory Group Policy security best practices.
Work with the Network division to monitor and investigate security issues originating from its tools or reviews.
Work with the Security and Compliance Administrator on forensic analysis and incident reporting.
Provide 24x7 access for incident response, including log review, data collection, SOC tool research, and forensic capture of system information.
Work with law enforcement as required to meet submission or reporting requirements.
Communicate with customers’ legal representatives when required.
Provide post-incident security reports detailing available information about attacks, possible compromise methods, remediation actions, and recommendations to prevent similar attacks.
Provide Tier II support to Server Operations Engineers and Field Engineers.
Use the current ticketing system to track work items, SLAs, priorities, work documentation, and customer follow-up.
Communicate with appropriate people through effective channels about issues or possible service outages, including when issues or outages are resolved.
Promptly advise the Director of Cyber Security of issues that affect service delivery to customers.
Perform other duties as assigned.