[Hiring] Senior Security Engineer @Constellis

Role Description

The Sr. Security Engineer is responsible for testing physical, logical, and electronic protection of data, including:

• Cloud
• Corporate
• Web application
• Access control
• Intrusion detection/prevention
• Virus protection

Additional responsibilities include:

• Digital Forensics
• Software Development
• Vulnerability Research
• Reverse Engineering
• Software/Hardware Engineering
• Operational Consultancy (e.g., Red Teaming/Hunt, Mission Evaluation)
• Performing incident response
• Working in the global security operations center
• Identifying current and emerging cyber events
• Developing countermeasures with known and/or discovered indicators

Qualifications

• Bachelor's degree preferred. Three additional years of related experience beyond the minimum may be substituted in lieu of a degree.
• Three years of IT engineering experience
• 5+ years of cybersecurity incident response participation (Preferred)
• Certified Information Systems Security Professional (CISSP) certification (Preferred)
• Knowledge of operating systems internals and endpoint security experience
• General knowledge of APT campaigns, Tools, Techniques, & Procedures (TTP), malware attack vectors, memory injection techniques, and malware persistence mechanisms
• Ability to obtain at least a Top Secret clearance

Requirements

• Resolve incidents and problem tickets, escalated to the Incident Response Team, issued against supported devices within published SLAs
• Identify opportunities for process improvement and automation of repetitive tasks leveraging a SOAR platform
• Operate security operations technology (SIEM/EDR) and provide ongoing system support and advice to other users of this technology
• Devise and implement approaches to monitor applications and data flows via effective information dashboards for operational metrics, end-to-end system data processing, incident management, change control, and compliance
• Use monitoring data in combination with other sources to analyze the risk of a successful attack
• Proactively recommend new tools, techniques, and procedures to enhance SOC performance and quickly learn new tools as they are introduced
• Actively search all areas of the internal network for hidden threats and vulnerabilities
• Assist in the development and documentation of policies and processes
• Support audits and compliance efforts
• Participate in red/blue/purple team exercises as needed to analyze threat scenarios and assess internal defenses. Document results
• Engage positively across multiple teams to establish clarity, vision, and mutual trust in order to achieve business goals
• Adhere to industry-specific local, state, and federal regulations, as applicable
• Other duties as assigned

Benefits

• Constellis offers a comprehensive, total rewards package that includes competitive compensation
• A flexible benefits package that reflects its commitment to creating a diverse and supportive workplace