Cybersecurity Co-Op

Responsibilities

• Support the effort to assess and define the cybersecurity design requirements for the S2 Global Certscan integration platform and associated hardware/software.
• Perform this work from within a standardized security framework.
• Support the process of defining innovative solutions to secure and support networked products that are used in highly diverse settings over long install periods.
• Analyze, report on and assist in management of security-related risks, including reporting on outcomes and proposing further security improvements.
• Participate in and assist with development or product test protocols. These protocols should allow for efficient assessment of product vulnerabilities, and include work with engineering and provide recommendations of remediation alternatives.
• Work with product engineering teams to help them understand cybersecurity test results and identify remediation techniques that could be employed to address the findings.
• Support efforts to assess the vulnerability of products to new and emergent threats. Efforts must identify root cause and identify remediation strategies as needed.
• Work to develop communications from those assessments that will inform internal engineering, service and external customers.
• Proactively support use of standardized processes.
• Prepare and document standard operating procedures and protocols to help ensure the security of our products as they are designed, developed, supported, and used.

Qualifications

• Currently pursuing degree or certification in cybersecurity, IT, Computer Science or related field.
• Familiarity with security standards and frameworks such as NIST 800-53, DHS-4300A, NIST CSF, NIST 800-171, IEC 80001, and/or ISO 27001/5, and/or US government ATO processes such as RMF.
• Experience performing vulnerability testing of systems and software is desired.
• Experience performing Threat, Exploit, and Vulnerability analysis of products and systems is desired.
• Technical knowledge of operating system and network security in physical, virtual and cloud-based (AWS) implementations is desired.
• Experience in security systems, including endpoint security, vulnerability management, network security technologies such as firewalls and IDS/IPS, wireless network security, authentication systems, log management, and encryption is desired.
• Capability to clearly communicate information security concepts and risks.
• Good verbal and written communication skills in English.
• Demonstrated ability to work as part of a team.
• Pursuing degree or certification in Cybersecurity, Computer Science, Information Security, Engineering, or related field.
• Cybersecurity certifications such as CISSP, Security+, CCNA Security, or GIAC are desirable.
• Required to meet S2 Global background investigation.