Cyber Security Engineer

Beta Eight; Hicksville (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

Beta Eight is seeking a seasoned Endpoint Security Engineer to administer and optimize EDR, antivirus and DLP across our systems in New York. You will drive incident response, log analysis and automation, collaborating with the SOC and other security teams.

You will mentor junior staff, contribute to threat intelligence, and help shape strategic investments in security tooling within the financial services domain. This on-site role requires strong communication and organizational skills.

Qualifications

• 5+ years of hands-on endpoint security experience.
• Must have hands-on EDR experience.
• Strong OS internals knowledge and exploit prevention/detection.
• Experience investigating security incidents and analyzing logs.
• Scripting in Python/PowerShell preferred.
• Splunk knowledge preferred.
• Experience creating trending, metrics and management reports.
• Strong communication with remote peers.
• Financial services industry experience preferred.
• Ability to mentor junior staff and provide technical direction.
• Self-motivated with good organizational skills.
• Security certifications preferred.

Responsibilities

• Provide administration and operational support for endpoint security technology covering EDR, Anti-virus & DLP solutions.
• Follow release management processes and best practices for deployments, enhancements and upgrades.
• Provide SME understanding of TTPs used by threat actors against endpoints; leverage EDR and other controls to protect systems.
• Collaborate with SOC and security groups during investigations.
• Demonstrate mastery in log analysis, fault isolation and root-cause assessment, then execute corrective actions.
• Leverage APIs to aggregate and enhance security data.
• Drive automation to monitor and maintain OS security posture.
• Stay current on endpoint security best practices and threats and mitigations.
• Draft and execute strategies to enhance investments in current technologies and drive innovation.
• Aggregate data across platforms to design and develop alerting.
• Maintain security metrics and analytics for systems and endpoints.
• Manage a portfolio of application-related security projects and lead select initiatives.

Skills

EDR experience

Endpoint security

OS internals

Log analysis

Scripting: Python/PowerShell

Splunk

Threat hunting

Team leadership

Financial services

Education

Bachelor's in Tech/Related field

Tools

EDR tools

Next-Gen AV

DLP solutions

Splunk

PowerShell

Python

Job description

Responsibilities

• Provide administration and operational support for endpoint security technology covering EDR (Endpoint Detection and Response), Anti-virus & DLP solutions
• Follow release management processes and best practices for deployment, enhancements and upgrades.
• Provide Subject Matter Expertise and demonstrate in-depth understanding of the TTPs (Tactics, Techniques and Procedures) used by threat actors against endpoints. Leverage EDR, Next-Gen AV and other security controls to protect systems against internal and external threats.
• Work closely with Security operations center and other security groups during investigations.
• Demonstrate mastery in log file analysis, fault isolation and diagnostic/assessment actions including root cause analysis, followed by the determination and self-directed execution of corrective actions.
• Employ and leverage APIs when applicable to aggregate & enhance data to safeguard systems.
• Drive automation efforts to continuously monitor and maintain security posture of operating systems.
• Stay current on endpoint security best practices, active threats and mitigation strategies.
• Draft & execute the strategy to enhance the investments in current technologies and drive continuous innovation with new ideas to improve and mature endpoint security posture.
• Aggregate data across disparate platforms to design and develop alerting.
• Maintain metrics and supporting analytics on System and endpoint Security.
• Manage a portfolio of application-related projects and directly manage select projects within that portfolio.

Qualifications

• 5+ years of demonstrable and hands experience with endpoint security technologies
• Hands on experience with EDR technologies is a MUST for this position.
• Demonstrated in-depth understanding of operating system (OS) internals, the mechanics of OS exploits with preventive and detective controls
• Demonstrated experience in investigating security incidents with ability to analyze logs to uncover details of the compromise, systems involved, threat techniques etc.
• Experience with scripting like Python, PowerShell etc., is highly preferred
• Knowledge of Splunk search language is preferred.
• Experience in creating trending, metrics, and management reports
• Strong interpersonal & communication skills working with remote peers over IM, phone & video.
• Experience working within the Financial Services Industry preferred
• Demonstrated ability to provide technical direction to other peer staff members, and to train new junior staff members on the security team
• Ability to elicit confidence and build rapport across multiple disciplines.
• Self-motivated; able to learn on own initiative
• Strong skills in organizing workflow, ideas & materials
• Excellent documentation skills
• Security certifications like Ethical Hacking or other specialized endpoint security certifications are preferred
• S in Technology or Related area (proven experience can be used as a substitute).