Cyber Security Engineer

As a Cyber Security Engineer, you will be responsible for safeguarding the organization's computer networks and systems. Your primary focus will be on preventing unauthorized access, ensuring data confidentiality, integrity, and availability, and responding to security incidents promptly. You will work closely with the IT team to implement security measures and technologies, conduct risk assessments, and develop strategies to mitigate potential threats.

Travel required for this job is 5%.

• Security Architecture: Design, implement, and maintain security architecture, including firewalls, intrusion detection systems, VPNs, and other security technologies to protect the organization's systems and data.
• Security Policies and Procedures: Develop and enforce security policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices.
• Vulnerability Management: Conduct regular vulnerability assessments and penetration testing to identify and remediate security weaknesses in systems, networks, and applications.
• Incident Response: Lead incident response efforts, including investigating security breaches, coordinating with relevant stakeholders, and implementing corrective actions to prevent future incidents.
• Security Awareness Training: Provide security awareness training and education to employees to raise awareness about security threats and best practices for maintaining a secure work environment.
• Security Monitoring and Analysis: Monitor security events and alerts using SIEM (Security Information and Event Management) tools, analyze security logs, and investigate suspicious activities to identify and respond to potential security incidents.
• Security Compliance: Ensure compliance with relevant laws, regulations, and industry standards (such as GDPR, HIPAA, PCI DSS) by implementing appropriate security controls and conducting regular compliance assessments.
• Risk Management: Assess security risks and develop risk management strategies to mitigate threats and vulnerabilities effectively.
• Security Governance: Establish and maintain security governance frameworks, including risk management processes, security controls, and performance metrics to measure the effectiveness of security programs.

Required Skills and Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or related field. Advanced degree or relevant certifications (e.g., CISSP, Sec+, CEH) preferred.
• Proven experience in cyber security roles, with a deep understanding of security principles, technologies, and best practices.
• Strong knowledge of networking protocols, operating systems, and cloud computing platforms (e.g., AWS, Azure, GCP).
• Experience with security assessment tools and techniques, including vulnerability scanning, penetration testing, and security incident response.
• Excellent analytical and problem-solving skills, with the ability to identify and mitigate security risks effectively.
• Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and communicate complex security concepts to non-technical stakeholders.
• Familiarity with security frameworks and standards (e.g., NIST Cybersecurity Framework, ISO 27001/27002) and regulatory requirements (e.g., GDPR, HIPAA, PCI DSS).
• Ability to stay updated on emerging security threats, vulnerabilities, and technologies and adapt security strategies accordingly.
• Eligibility Requirement: Must be a U.S. citizen.
• Location Requirement: Must reside in the greater Orlando, FL area.

Additional Skills (Preferred):

• Experience with security automation and orchestration tools (e.g., SOAR platforms).
• Knowledge of containerization and orchestration technologies (e.g., Docker, Kubernetes).
• Experience with DevSecOps practices and integrating security into the software development lifecycle (SDLC).
• Familiarity with machine learning and artificial intelligence techniques for security analytics and threat detection.

#IND1