Cybersecurity Threat Engineer

About the role

The Role

Responsibilities

• Support leadership with enterprise-wide vulnerability identification, assessment, and remediation programs across infrastructure, cloud, and applications.
• Provide continuous visibility to new and emerging threats against existing security controls; ensuring controls remain effective to changing business and threat landscapes.
• Work across the Tech department to enhance security posture capabilities to limit security misconfigurations through secure configuration standards, monitoring, and remediation.
• Integrate automated scanning and vulnerability intelligence into CI/CD and asset management systems.
• Translate offensive findings into actionable security improvements and detection of engineering use cases.
• Collaborate with defensive teams to validate security controls and improve resilience through continuous testing.
• Support the Offensive Security Lifecycle via management of internal and external Cyber Threat and Offensive Security assessments.
• Partner closely with Incident Response teams to enhance detection of logic, playbooks, and threat-hunting capabilities.

Qualifications

• A minimum of 6 years’ experience delivering information security solutions, ideally with a mixed focus on offensive and defensive security roles.
• Bachelor’s or master’s degree in a relevant field of work.
• Hands-on experience in Cyber Threat and Offensive Security operations to test and validate the effective operation of security controls, measuring the ability to stop threats and attacks at the earliest point in the kill chain.
• Proven track record working as both an individual contributor and lead in the areas of Cyber Threat, Vulnerability Management, or Incident Response.
• Strong understanding of the fundamental operations of servers, operating systems, networks, cloud applications and infrastructure along with an advanced understanding of the key controls required for secure operation of these systems.
• Experience scripting in at least one of the following languages: PowerShell, Python, JavaScript.
• Experience integrating the following tools and capabilities into a successful threat and vulnerability program – Security Orchestration Automation and Response, Security Information and Event Management, Vulnerability Scanning, Security Threat Feeds, Red Team Tooling.

Benefits

We offer a competitive compensation package, including a range of $111,000 - $133,000 annually in Nashville, plus benefits and a discretionary bonus. The role is hybrid, based in our Nashville office.

Pay

The annual base salary for this position is in the range of $111,000 - $133,000 in Nashville.

Schedule

This role is hybrid, based in our Nashville office.