Sr Cyber Defense Sys Engineer

Constellation Energy Generation, LLC. • Annapolis, MD

1d

About The Position

Responsible for maintaining and operating the Cyber Security Operations Center (CSOC) and providing targeted security advisory services. The role tests, implements, deploys, maintains, reviews, and administers the infrastructure hardware, software, and documentation required to manage network defense effectively. It enables the Cyber SOC to meet performance metrics across Security Monitoring, Incident Handling & Response, Digital Forensics & eDiscovery, Cyber Threat Intelligence, and Technical Solutions Development. The engineer creates content for monitoring toolsets while maintaining a uniform view of security monitoring architecture, and administers cyber defense infrastructure hardware and software.

Requirements

• Bachelor's degree and 5 years of relevant experience, or 9 years of relevant experience in lieu of a degree.
• 5 years of solid, diverse experience in cybersecurity vulnerability assessments, or an equivalent combination of education and work experience.
• Knowledge of SIEM, EDR, Microsoft security suite, Linux, Palo Alto, operations, engineering, content development, internetworking, TCP/IP, and Cribl or BindPlane.
• Strong knowledge of the Software Development Life Cycle (SDLC) and digital product development.
• Knowledge of how network services and protocols interact to provide network communications.
• Knowledge of security principles such as threat lifecycle management and incident management and lifecycle.
• Knowledge of Cyber SOC processes and Cyber SOC engineering.
• Knowledge of network protocols such as TCP/IP and DHCP, and directory services such as DNS and Active Directory.
• Knowledge of network traffic analysis methods and packet-level analysis using appropriate tools such as Wireshark.
• Knowledge of basic system administration, network, and operating system hardening techniques.
• Knowledge of network security architecture concepts, including topology, protocols, components, and defense in depth.
• Knowledge of the OSI model and underlying network protocols and directory services.
• Skill in troubleshooting and diagnosing cyber defense infrastructure anomalies and resolving them.
• Skill in securing network communications.
• Knowledge of protecting a network against malware and of web filtering technologies.
• Knowledge of cyber defense policies, procedures, and regulations.
• Knowledge of test procedures, principles, and methodologies, such as CMMI.
• Knowledge of basic system, network, and OS hardening techniques and security benchmarks.

Nice To Haves

• Experience with data pipelines.
• Graduate degree in cybersecurity or a related area of expertise.
• Ability to demonstrate analytical skills, technical knowledge, and practical application of cyber and information security principles to business leaders and technical staff.
• Skill in using security event correlation tools.
• In-depth knowledge of cybersecurity program elements, including policy development, application security, information security, network security, disaster recovery planning, operational security, incident response, and end-user education.
• CIM normalization.

Responsibilities

• Deploy new data source feeds into the SIEM and develop initial monitoring content.
• Monitor SIEM infrastructure performance.
• Continually monitor, refine, and improve CSOC security technologies.
• Administer specialized cyber defense applications and systems, including EDR, cloud and email security, SIEM, and appliances; perform installation, configuration, maintenance, backup, and restoration.
• Build, install, configure, and test dedicated cyber defense hardware.
• Provide log and monitoring design services and identify potential conflicts in implementing cyber defense capabilities, including tool testing and optimization.
• Provide security advisory services.
• Assist in identifying, prioritizing, and coordinating protection of critical cyber defense infrastructure and key resources.
• Manage SOC releases and changes.
• Ensure threat and vulnerability management equipment, systems, applications, and appliances are available and operating effectively.
• Assist in assessing the impact of implementing and sustaining dedicated cyber defense infrastructure.
• Lead projects to enhance security technologies, practices, and processes.

Benefits

• Bonus program.
• 401(k) with company match.
• Employee stock purchase program.
• Medical, dental, and vision benefits.
• Wellbeing programs.
• Disability and life insurance benefits.
• Paid time off for vacation, holidays, and sick days.
• Comprehensive benefits package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior