Security Engineer - Remediation

Thrive; Capas; Hybrid; PHP 700,000 - 1,100,000; Full time

Job summary

Thrive is seeking a Security Engineer for remediation to address vulnerabilities identified through vulnerability management and pentesting. You will focus on remediation for gaps not covered by Thrive's services, including assets not fully managed by Thrive.

You will collaborate with the Infosec Ops Team, document remediation efforts, and communicate results to clients while staying updated on threats and best practices to maintain Thrive's leadership in cybersecurity services.

Qualifications

• Solid understanding of cybersecurity threats, vulnerability management, and remediation techniques.
• Able to analyze complex security issues and develop remediation plans.
• Excellent written and verbal communication for non-technical audiences.
• Proven ability to collaborate with stakeholders to meet security goals.
• Demonstrates passion for cybersecurity and high security standards.

Responsibilities

• Assess vulnerabilities and implement remediation strategies.
• Document remediation efforts and outcomes.
• Communicate remediation results to clients clearly.
• Stay informed on security threats and remediation techniques.
• Ensure remediation aligns with standards and best practices.

Skills

Vulnerability mgmt

Remediation skills

Security tooling

Communication skills

Team collaboration

Threat intel

Tools

GPOs & Intune

On-Prem/Cloud/Hybrid

SSL certificates

Job description

About Us:

Thrive is a rapidly growing technology solutions provider focusing on Cloud, Cyber Security, Networking, Disaster Recovery, and Managed Services. Our corporate culture, engineering talent, customer‑centric approach, and focus on next‑generation services help us stand out amongst our peers. We are committed to developing valuable skills that ignite passion and lead to a fulfilling career. If you're attracted to a \"work hard, play hard\" environment and seek the guidance and training necessary to build a lucrative career, welcome to Thrive!

Position Overview:

Thrive is seeking a skilled Security Engineer for a Remediation role to join our team. This role is dedicated to addressing vulnerabilities and attack vectors identified through Thrive's Vulnerability Management and Pentesting services. The Security Engineer – Remediation will focus on remediation efforts for vulnerabilities not covered under existing Thrive services, such as those not included in patching or on assets that are not fully managed by Thrive.

Primary Responsibilities:

• Collaborate closely with the Infosec Ops Team to thoroughly assess vulnerabilities and attack vectors identified through Thrive's services and implement effective remediation strategies into the existing security framework.


• Document and maintain detailed records of remediation efforts, including methods used, outcomes, and any follow-up actions required.


• Provide clear and concise communication to clients regarding remediation efforts and outcomes, ensuring transparency and understanding.


• Stay informed about the latest security threats and remediation techniques to maintain Thrive's leading edge in cybersecurity services.


• Ensure all remediation efforts align with industry standards and best practices to uphold high security standards.

Qualifications:

• Solid understanding of cybersecurity threats, vulnerability management, and remediation techniques.


• Ability to analyze complex security issues and develop effective remediation strategies.


• Excellent written and verbal communication skills, capable of articulating technical concepts to non-technical audiences.


• Proven ability to work effectively within a team and collaborate with stakeholders to achieve security goals.


• Demonstrates a strong passion for cybersecurity and a commitment to maintaining high security standards.

Required Skills:

• Experience in vulnerability discovery, analysis, and remediation.


• Experience in full lifecycle of GPOs and Intune Configurations for system hardening and remediation. Includes scoping, testing, deploying and decommissioning policies.


• Experience with On-Prem, Cloud, and Hybrid infrastructure environments.


• Strong understanding of network protocols, operating systems and management of SSL certificates with a focus on security best practices.


• Familiarity with TCP/IP and application layer protocols (e.g., HTTP, SMTP, DNS).


• Ability to analyze large amounts of data from various sources to solve complex problems.

Preferred Skills:

• Knowledge of common Windows and Linux/Unix system calls and APIs.


• Understanding of Anti-Virus and malware protection techniques.


• Familiarity with programming languages for scripting and automation tasks.


• Knowledge of internal file structures for file formats commonly associated with malware (e.g., OLE, RTF, PDF, EXE).


• Certifications such as Net+, Sec+, Cysa+ or equivalent are strongly recommended.


• Full cycle experience call out might be better \"scoping, testing and deploying/decommissioning...\".