Copy of Cybersecurity Engineer

Saliense; Virginia (MN); On-site; USD 110,000 - 160,000; Full time

Job summary

Saliense seeks a Security Engineer - Middle to conduct security assessments, audits, and penetration testing across client/server systems, networks, and databases. The role requires managing SIEM tools, incident response, and forensics, with one day onsite in Arlington, VA.

Strong scripting and vulnerability management experience are essential. The candidate will define security standards, coordinate event collection, and monitor systems while keeping abreast of current threats and attack

Qualifications

• Minimum 3 years of information systems security engineering experience.
• Hands-on experience with one or more SIEM tools.
• Experience with penetration testing and security assessments.
• Vulnerability and patch management experience.
• Automated and manual security testing techniques.
• Router and firewall management, installation, configuration, troubleshooting.

Responsibilities

• Define, review, and enforce information security policy, standards and guidelines for business operations and technology implementations.
• Proactively identify IT security risks from technical and functional perspectives.
• Conduct technical security assessments as part of the vulnerability and patch management program.
• Coordinate and conduct event collection, log management, monitoring, and identity surveillance for the USMS enterprise.
• Analyze data from event monitoring systems to drive immediate corrective action and trend analysis.
• Maintain awareness of security threats and incidents and provide user awareness.

Skills

SIEM tools

Penetration testing

Log analysis

Router management

Firewall management

IDS/IPS

OS security

Forensic IT

Scripting (Python)

Security automation

Vulnerability management

Education

BS/BA in CS/IS/Engineering

Tools

Windows

Linux

Job description

Security Engineer - Middle will conduct technical security assessments, audits, penetration testing, and forensic IT functions of client/server systems (native and virtual), databases, networks, and vehicle/appliance technology systems. In-depth experience configuring and managing one or more SIEM tools. Be able to identify current security infrastructure and define future programs, design and implementation of security related to IT systems.

Must have a minimum of three (3) years of proven information systems security engineering experience. At minimum, an in-depth knowledge and management of one or more Security Incident and Event Management (SIEM) tools is required. Additionally, the Security Engineer - Middle shall possess hands-on experience in penetration testing and router/firewall management.

This role requires one day onsite in Arlington, VA.

Technical Skills:

• In-depth, hands-on configuration and management of one or more SIEM tools.
• Log collection, aggregation, normalization, and correlation from diverse sources (e.g., servers, network devices, and applications).
• Event monitoring, analysis, and reporting.
• Experience with conducting penetration testing and technical security assessments.
• Vulnerability and patch management.
• Automated and manual security testing techniques.
• Router and firewall management, including installation, configuration, and troubleshooting.
• Intrusion detection and prevention systems (IDS/IPS).
• Operating system security, including experience with Windows and Linux environments.
• Securing virtualized client/server systems.
• Database security.
• Coordinating and managing security incident response efforts.
• Forensic IT functions to investigate security breaches and determine root cause.
• Log analysis for security incidents.
• Defining, reviewing, and enforcing information security policies, standards, and guidelines.
• Ensuring compliance with relevant regulatory requirements.
• Knowledge of current security trends and threats.
• Researching new attack vectors.
• Thinking like a hacker to anticipate vulnerabilities.
• Familiarity with scripting languages (e.g., Python, Bash) for automating security tasks and managing systems.
• Experience with security automation frameworks.

Responsibilities:

• Define, review, and enforce information security policy, standards and guidelines for business operations and technology implementations.
• Proactively speculate and identify IT security risks from technical and functional perspectives.
• Conduct technical security assessments as part of the enterprise vulnerability and patch management program.
• Conduct as needed technical security assessments, audits, penetration testing, and forensic IT functions of USMS client/server systems (native and virtual), databases, networks, and vehicle/appliance technology systems.
• Coordinate and conduct event collection, log management, event management, compliance automation, and identity monitoring activities for the USMS enterprise.
• Analyze data collected by the event monitoring system(s), identifying results that dictate immediate corrective action, trends that drive prompt action and areas that require continued monitoring and/or further analysis.
• Maintain awareness of current security trends and threats, respond to reported incidents to conclusion, and provide awareness to system users.
• Coordinate IT security matters such as incident response, intrusion detection management, and customer security advisories.

Requirements:

Required Education

BS/BA in Computer Science, Information Systems, Engineering, Business, Physical Science, or other technology-related discipline.

Required Skills

In-depth, hands-on configuration and management of one or more SIEM tools.

Log collection, aggregation, normalization, and correlation from diverse sources (e.g., servers, network devices, and applications).

Event monitoring, analysis, and reporting.

Experience with conducting penetration testing and technical security assessments. Vulnerability and patch management.

Automated and manual security testing techniques.

Router and firewall management, including installation, configuration, and troubleshooting.

Intrusion detection and prevention systems (IDS/IPS).

Operating system security, including experience with Windows and Linux environments.

Securing virtualized client/server systems.

Database security.

Coordinating and managing security incident response efforts.

Forensic IT functions to investigate security breaches and determine root cause.

Log analysis for security incidents.

Defining, reviewing, and enforcing information security policies, standards, and guidelines.

Ensuring compliance with relevant regulatory requirements.

Knowledge of current security trends and threats.

Researching new attack vectors. Thinking like a hacker to anticipate vulnerabilities.

Familiarity with scripting languages (e.g., Python, Bash) for automating security tasks and managing systems.

Experience with security automation frameworks.