Senior Cybersecurity Engineer
$190,000–$190,000 year
HybridNew York City, New York, United States
Job Summary
Establish and deliver on key strategic cybersecurity initiatives by recommending, configuring, and maintaining security systems aligned with the current threat landscape. Manage and contain information cybersecurity incidents to protect critical assets, intellectual property, and the company's reputation while maintaining programs for protection, detection, response, and recovery. Liaise with technical and business teams to ensure threat indicators are rated by severity and responded to consistently, working in partnership with technology departments to support infrastructure, cloud, and application security best practices. Participate in on-call after-hours rotations to resolve critical performance issues and address security events in accordance with internal SLAs, while supporting MSSP and threat intelligence vendors. Collaborate with data privacy and compliance teams to prioritize risk remediation efforts.
Required Qualifications
- 4-year degree in computer science or related combined work/education experience
- Minimum 5 years relevant work experience in the field of cybersecurity
- Hands on experience in related cybersecurity technologies and tools
- Experience in security related programs
- Experience in supporting Microsoft EntraID (Azure AD), Microsoft Active Directory (AD), Windows Server and Linux Server platforms
- Experience in working in an Information Technology organization supporting a corporate environment
- Experience in Identity Access Management (IAM)
- Experience in Multi-Factor Authentication (MFA), Single Sign-On (SSO) platforms or other authentication methods
- Experience in or hands on experience with secure configuration management and system hardening
- Experience in cloud security (AWS, Google, or Azure)
- Strong knowledge of TCP/IP, DNS, NAT, and the OSI Model
- Knowledge of NIST Controls, the NIST Cyber Security Framework (CSF) and ISO/IEC 27000 series frameworks
- Knowledge of or experience in deployment of the Center of Internet Security (CSC) Critical Security Controls (CSC) top 18
- Ability to analyze complex information and identify key and relevant points, including communicating in a relevant and easy to understand manner
- Strong operational and process background
- Strong verbal and written communication skills
- Strong attention to detail, well-organized, and able to manage time efficiently
- Team player with ability to deal effectively with individuals at all levels
- Ability to maintain constructive and collaborative demeanor in stressful situations, including incident response
- Ability to make timely critical decisions with limited and / or ambiguous information
Desired Qualifications
- Certified Information Systems Security Professional (CISSP) a plus
- Experience with Next Generation Firewalls (NGFW)
- Experience with Web Application Firewalls (WAP)
- Experience with Unified Threat Management (UTM)
- Experience with Security Information and Event Management (SIEM)
- Experience with Network Access Control (NAC)
- Experience with Endpoint Detect and Response (EDR)
- Experience with security appliances, software, and vendor specific utilities
- Experience in IoT security
- Experience in mobile security
- Experience in computer forensics and cyber incident investigations a plus
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.