Engineer, Cybersecurity Engineering

About the Role

IS Cybersecurity Engineering maintains, improves, implements, and advises on systems and processes supporting Information Security to defend ICE networks, preserve company reputation, and assess program effectiveness. The Cybersecurity Engineering Engineer works as part of a results-oriented, service-delivery team and assists other disciplines within the Information Security team. The role involves performing root cause analysis, selecting and developing automation tools, and participating in deeply technical discourse.

Responsibilities

• Maintain existing infrastructure availability
• Enhance existing infrastructure effectiveness
• Implement new infrastructure capabilities
• Advise on cyber systems and procedures
• Collaborate to service all cybersecurity systems and provide technical and procedural advice to sustain the engineering program's unplanned work
• Configure cyber tools and respond to cyber tools outage incidents
• Advise colleagues on cyber systems
• Steward documentation and processes for cyber systems
• Communicate status of cyber systems to colleagues and leadership
• Advise on unplanned work prioritization
• Collaborate to complete Infosec projects and initiatives aligned with cyber systems
• Document, share, and transition projects and initiatives
• Participate in project and initiative planning and problem solving
• Complete planned work
• Communicate status of planned work
• Research and focused learning to support projects
• Advise on projects and processes

Requirements

• Degree in engineering discipline or equivalent experience
• 3+ years of relevant Engineering or Information Security experience
• Top-tier analytics and problem-solving skills
• Ability to work in a service-oriented team environment
• Good organizational and time management skills
• Effective communication with both technical and business resources

Skills

• EDR/EPP/Agent-based security systems
• SIEM
• DNS
• Linux, Windows, Mac endpoint detection and analysis
• Networking
• MITRE framework
• Network security
• Endpoint security
• Proxies
• API security
• Python
• Cloud security
• Data Loss Prevention (DLP)
• Container security
• Distributed systems
• Change management
• Incident handling
• Agile methodologies
• Security frameworks
• DNS and application-based filtering
• CDNs
• Last-mile security
• Sandboxing
• AI security
• User behavior security
• Logging and data collection
• Data analytics
• Strong communication and collaboration skills