[Hiring] Cyber Engineer @CDM Smith

Role Description

The Cyber Engineer will assist CDM Smith in their Continuous Threat Exposure Management (CTEM) journey. Responsibilities include:

• Identifying, tracking, and verifying remediation of vulnerabilities across internal and external applications and systems.
• Working with IT infrastructure, application development, and security operations teams to reduce vulnerabilities and attack surface risk.
• Architecting, deploying, and operating secure cloud application infrastructure aligned to business needs.
• Applying strong administrative, troubleshooting, architecture, engineering, and design skills while maintaining policies and controls.
• Leading vulnerability management and collaborating with technology leadership and business units to secure company digital assets.
• Reporting on vulnerability criticality, exploit probability, business impact, and remediation progress to security and IT leadership.
• Documenting, formulating, and enforcing areas of security improvement that balance risk with business operations.
• Staying apprised of current and proposed security changes impacting regulatory, privacy, and security industry best practice guidance.

Qualifications

• Bachelor's degree.
• 8 years of related experience.
• Equivalent additional directly related experience will be considered in lieu of a college degree.

Requirements

• Demonstrated ability to use cloud tools and automation technologies to support secure, efficient infrastructure and security operations.
• Proficient in one or more: Bicep, AKS, Terraform, Kafka, Kubernetes, Helm, OpenShift, scripting (Python, JavaScript).
• Proven use with zero trust network access, encryption, web application firewalls, data protection, vulnerability management, API security, IaC.
• Strong knowledge of vulnerability management principles, methodologies, and best practices.
• Ability to define, track, and report on key performance indicators (KPIs) and metrics to measure vulnerability management program effectiveness.
• Experience automating asset inventory, vulnerability discovery, assessment, and reporting processes.
• Ability to identify, assess, document, prioritize, and validate remediation of system and application vulnerabilities.
• Strong understanding of attack surface management, secure configuration practices, host hardening, and application hardening techniques.
• Ability to work in a collaborative purple-team environment with offensive security, defensive security, threat intelligence, risk management, and operations teams.
• Excellent written and verbal communication skills with the ability to communicate technical security concepts to both technical and non-technical audiences.
• Commitment to staying current on emerging threats, vulnerabilities, attack techniques, and cybersecurity industry trends.

Benefits

• No travel is required.