Description

Provide information security consultation, remediation, and risk analysis for the enterprise security program on a weekend shift schedule.

This role is hybrid.

Responsibilities

• Perform remediation of security assessment review issues and provide complex ad hoc data and reporting for risk management.
• Conduct security control testing, review assessment findings, and direct information asset portfolio reconciliations and certifications.
• Develop and deliver Information Security Education, Awareness, and Training in accordance with enterprise standards.
• Evaluate and interpret internal security policies, processes, and standards to recommend improvements and clarify business impact.
• Mentor less experienced staff and collaborate with stakeholders to resolve security issues and optimize controls.

Required Skills

• 5+ years of Information Security Engineering experience or equivalent demonstrated through work, training, or military service.
• 1+ years of experience with Incident Response Protocols and Tools.
• 1+ years of experience with Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) products.
• 1+ years of experience with Azure, Office 365, or Cloud technologies.
• Strong understanding of security analytics, including incident response and digital forensics.
• Knowledge of data security controls including malware protection, firewalls, IDS, content filtering, and encryption.
• Ability to analyze host and/or network logs for incident response and threat hunting.

Preferred Skills

• Experience with Endpoint Detection and Response (EDR) products.
• Knowledge of offensive security and Identity Access Management.
• Certifications such as GIAC, OSCP, OSWP, OSCE, OSEE, or OSWE; Cloud Certifications (GCP, AWS).

Key Skills

Education

Any Graduate