Cybersecurity Professional

Primary Responsibilities

• Assists with cyber-threat monitoring and Security Operations Center (SOC) duties.
• Performs daily security operations duties including handling service requests from Business and IT teams.
• Updates standard operating procedures and as-built documentation.
• Routinely publish performance metrics.
• Maintains key security intelligence feeds and escalates relevant risks.
• Participates in cybersecurity technology projects and lifecycle management.
• Provides security technical assistance for IT projects intended to enable or advance business initiatives.
• Safeguards secure integration of Cloud and Third-party Applications.
• Affixes recurring patch and vulnerability management tasks.
• Facilitates third-party penetration testing (Ethical Hacking) to confirm design and operational effectiveness of security controls.
• Guides employees with security policy (e.g., password complexity, encryption settings, etc.) and advances cybersecurity awareness campaigns (e.g., Phishing email simulations).
• Routinely publishes Governance, Risk, and Compliance (GRC) metrics.
• Examines design and operational effectiveness of security controls.
• Coordinates audit engagements led by Internal Audit, Regulator, or external audit firm.
• Supports assessment of internal and third-party cybersecurity risk.
• Examine audit reports (e.g., SOC 1, SOC 2, ISO 27001, etc.).
• Supports customer inquiries about Carpenter compliance related to IT and Security.

Requirements

• Bachelor of Science degree in computer science or related field preferred. Or equivalent work experience.
• Associate's degree in computer science or related field minimum required with a combination of Cybersecurity related certifications (e.g., CISSP, CISM, GCIH, GCIA, CEH, Security+, etc.) and additional 2 years' experience.
• Minimum 7 years of related experience with Security Operations, Network Security, Vulnerability Management, Compliance, or Audit.
• Advanced understanding of information technology.
• Advanced knowledge of multiple security domains and common security controls.
• Expert knowledge of 2-3 security domains.
• Familiarity with common hacking techniques (e.g., malware, phishing, etc.) and effective counter measures.
• Adoption of security best practices and industry standards (e.g. NIST, ISO, CIS, COBIT, etc.).
• Hands-on operation of cybersecurity infrastructure (e.g., Firewalls, Intrusion Detection, AV, PKI, Encryption, etc.) and configuration experience.
• Security Incident Response handling.
• Malware analysis.
• Multi-task and manage demands of multiple projects, incidents, and tasks.
• Meet deadlines and manage changing priorities.
• Perform effectively both independently and in a team environment.

Qualifications

• Must be legally authorized to work in the United States without the need for employer sponsorship, now or in the future.
• Carpenter Technology Company offers a competitive salary and a comprehensive benefits package including life, medical, dental, vision, flexible spending accounts, disability coverage, 401k with company contributions as well as many other options to employees.
• Carpenter Technology Corporation’s policy is to fully and effectively maintain a program of equal employment opportunity and nondiscrimination for all employees, to employ affirmative action for all protected classes, and to recruit and develop the best qualified persons available regardless of age, race, color, religion, sex, gender identity, sexual orientation, marital status, national origin, political affiliation or any other characteristic protected by law.
• The Company also will recruit, develop and provide opportunities for qualified persons with disabilities and protected veterans.