Cyber Security Engineer

Note: - This is an Hybrid Position. You are requested to be at client location at least 3 days in a week

• Perform real-time security log and event analysis and take action to contain and mitigate information security threats. The events will originate from SIEM, DLP, IDS/IPS, antivirus, firewalls and system security logs.
• Experience in using SIEM technology, packet captures, reports, data visualization, pattern analysis and fine tuning of rules.
• Identify and address incidents requiring remediation.
• Create, analyze and develop remediation plans resulting from the identification of vulnerabilities discovered during scheduled scans. Collect and analyze threat intelligence from internal and external sources to provide situational awareness and early detection of emerging attack vectors.
• Maintain existing security systems such as IDS/IPS, Anti-Virus, EPO, SIEM and other cyber-attack detection and analytics tools.
• Assist with the technical aspect of third-party risk assessments.
• Work across teams to accomplish security program goals.
• Implement new security technologies and solutions.
• Work closely with the IT department in troubleshooting various security related issues and providing guidance in handling security requests.
• Research and recommend new security technologies to continuously mature the security program.

• Strong technical and infrastructure background.

• Strong on the operations side of information security
• Strong log analysis and SIEM experience.
• SPLUNK Administrator or Power User a plus.
• Strong Incident Response experience: TIER 2/3 CSIRT Analyst .
• Detail oriented and able to meet tight deadlines.
• Excellent written, verbal and interpersonal skills.
• Highly motivated self-starter with an inquisitive personality.
• Desire and ability to learn new skills and concepts.
• Strong knowledge of information security domains, concepts and principles.
• Advanced knowledge of server and desktop operating systems.
• Advanced knowledge of routers, switches, firewalls, and other network equipment.
• Practical experience with frameworks such as COSO COBIT, ISO 27002 and NIST.
• Ability to scope, conduct and analyze audits based on controls frameworks.
• Penetration testing experience a plus.
• Familiarity with MITRE ATT&CK framework.
• Experience with any of the following is required:
• Vulnerability Scanning tools
• Network Scanning/Management tools, Event Log management systems
• Anti-virus, Anti-spam and other protective tools
• Encryption products and Open source security related tools
• Forensic Tools
• Malware Analysis
• Analysis of network captures
• Advanced Persistent Threat analysis and mitigation

• Bachelor’s degree in related field or discipline.
• 8+ years of experience in information technology and security.
• CISSP, CISA, GIAC and other Industry Certifications considered a plus.