Cyber Security Analyst

COVET IT INC; Frisco (TX); Hybrid; USD 100,000 - 150,000; Full time

Job summary

A top staffing and recruiting company seeks a Principal Cybersecurity Engineer or Junior Cybersecurity Architect. This hybrid position involves leading security reviews, addressing vulnerabilities, and employing threat modeling techniques. The ideal candidate holds extensive cybersecurity experience and is adept at communicating complex security concepts effectively.

Qualifications

• Strong background in Application Security.
• 10+ Years in Cyber Security.
• 8+ Years in Application Security.

Responsibilities

• Lead security reviews of new technologies and remediation plans.
• Collaborate with teams to address vulnerabilities.
• Analyze technologies for threat modeling.

Skills

Cyber Security

Application Security

SSL

Firewall policy design

Vulnerability analysis & mitigation

Cloud Platforms

Scripting tools

Job description

Get AI-powered advice on this job and more exclusive features.

Job: Principal Cybersecurity Engineer/ Jr Cybersecurity Architect

Location: Bellevue WA, Overland Park KS, Frisco TX, Ravinia, GA

Type: Long Term Contract

This is a Hybrid position (Weekly 3 days onsite)

Role Overview

Principal Cybersecurity Engineer/ Jr Cybersecurity Architect with a strong background in Application Security.

Mandatory Areas

Must Have Skills:

• Cyber Security: 10+ Years
• Application Security: 8+ Years
• SSL: 8+ Years
• Firewall policy design: 5+ Years
• Vulnerability analysis & mitigation: 5+ Years
• Experience with load balancers (A10, F5), firewalls (CheckPoint), Venafi, MDM (Mobile Iron), Cloud (AWS, Azure), Malware Protection (FireEye), APTs (Damballa), Privileged Accounts (CyberArk), SIEM (ArcSight), Log & Event (Splunk), IDS/IPS (Symantec): 5+ Years
• Cloud Platforms (PCF, Docker), Scanning (Qualys), AppSec (Veracode): 5+ Years

Job Responsibilities

• Lead security reviews of new technologies, designs, and remediation plans.
• Collaborate with Engineering & Operations teams to address vulnerabilities.
• Identify security needs, recommend plans, implement, test, and monitor security improvements.
• Analyze underlying technologies for threat modeling, including trust boundaries, threat agents, vectors, and safeguards.
• Implement threat modeling approaches like STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, CAPEC.
• Develop mobile application threat models, cyber threat trees, and data flow diagrams.
• Expertise in network & information security, including firewall policies, SSL certificates, vulnerability mitigation.
• Understand wireless network security solutions.
• Create technical specifications, work independently, adapt to evolving technologies.
• Communicate complex concepts effectively to leadership and teams.

Additional Skills

• Experience with scripting tools (Python, Perl, Shell, HTML, PHP).
• Knowledge of federal and compliance regulations (SOX, PCI, CPNI).
• Web application development, RESTful APIs, Java, frameworks, Python, Node.js.
• Experience with mobile applications and handset security.

Seniority Level

Mid-Senior level

Employment Type

Contract

Job Function & Industry

Information Technology; Staffing and Recruiting