Cyber Security Engineer

Unknown Company; United States; Hybrid; USD 165,000 - 248,000; Full time

Job summary

UST is seeking a Principal Cyber Security Engineer to join our hybrid team across Bellevue, WA, Overland Park, KS, Frisco, TX, and Ravinia, GA. The contract role focuses on ensuring secure software, systems, and infrastructure with deep expertise in threat modelling, policy design, and security architecture.

Ideal candidates bring extensive experience with mobile and IoT security, cloud platforms (AWS/Azure), and enterprise networks, plus strong collaboration across engineering and operations to

Qualifications

• 13+ years of experience in information security engineering.
• Subject matter expert across mobile, IoT, enterprise apps, cloud, big data and networks.
• Strong knowledge of threat modelling frameworks and security design patterns.
• Ability to create technical specifications and work independently.
• Excellent verbal and written communication with cross-functional teams.

Responsibilities

• Perform security assessments, code reviews and vulnerability testing to identify risks and remediation steps.
• Lead threat modelling efforts (STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, CAPEC, Mobile threat models).
• Collaborate with engineering and operations to address security vulnerabilities and improve posture.
• Review new technologies and remediation planning; guide cross-functional teams.
• Design and enforce firewall policies, SSL cert management and vulnerability mitigation strategies.
• Translate complex security concepts for leadership and peers.

Skills

Threat modelling

Security architecture

Threat & risk assessment

Cross-functional collaboration

Cloud security

Incident response

Tools

A10

F5

CheckPoint

Venafi

MDM (MobileIron)

AWS

Azure

FireEye

Damballa

CyberArk

ArcSight

Splunk

Qualys

Veracode

Python

Perl

Shell

HTML

PHP

Docker

Job description

Role : Principal Cyber Security Engineer

Location : Bellevue, WA or Overland Park, KS or Frisco, ,TX or Ravinia, GA (Hybrid)

Duration : Long Term - Contract

Experience : 13+

Job Description

• UST is looking for a candidate who will help ensure that client’s software, systems, and infrastructure are designed and implemented to the highest security standards.
• Performs technical security assessments, code reviews and vulnerability testing to highlight risk and remediate associated findings while helping client teams and partners improve security.
• Works closely with other client Engineers to design and build proactive methods to enhance our security posture.
• This position serves as a subject matter expert which drives vision and results to enhance security posture within mobile device, IoT device, enterprise line of business applications, cloud, big data, and core and carrier network technologies as well as and other business units as needed as well as act as a Principal security advisor to cross-functional teams for the successful delivery of projects or services to enterprise customers.
• Leads information security review of new technologies, designs, and remediation planning efforts.
• Collaborates with Engineering & Operations Teams to address security vulnerabilities found via PSIRTs, scans or breaches Investigates and/or leads identifying security needs & recommends plans/resolutions.
• Implements, tests & monitors info security improvements.
• Significant experience with the analysis of underlying technologies that form the solution necessary for the application of threat identification, analysis, and thread model design.
• The threat model depicts the trust boundary, threat agent(s), threat vector(s), and safeguard(s) necessary to protect a person, asset, data, and brand.
• Significant experience with implementation of various threat modelling approaches pertaining to one or more of the following STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, CAPEC, Mobile Application threat model, Cyber Threat Tree, and data flow diagram.
• Subject matter expert in multiple facets of network & information security, including Firewall policy design, SSL Certificate management, vulnerability analysis & mitigation, and other topics as assigned.
• Advanced understanding of IP/Security solutions & technologies applicable to the Wireless Network Architecture.
• Subject matter expert in all facets of network & information security, including Firewall policy design, SSL Certificate management, vulnerability analysis & mitigation, and other topics as assigned.
• Ability to create technical specifications and requirements and work independently and with no direction/supervision.
• Able to quickly adapt to new or evolving technologies related to new products & services requiring validation or research.
• Strong verbal and communication skills with diverse cross functional groups.
• Ability to present advanced concepts to leadership, peers, and others in subordinate roles.
• Understanding load balancers (ex – A10, F5), firewalls (ex – CheckPoint), Venafi, MDM (ex - Mobile Iron), Cloud (ex - AWS, Azure), Malware Protection (ex -FireEye), Advanced Persistent Threats (ex - Damballa), Privileged Accounts (ex – CyberArk), SIEM (ex – ArcSight), Log & Event (ex – Splunk), Intrusion IDS/IPS (ex – Symantec), Cloud Platform (ex – PCF, Docker), Scanning (ex – Qualys), AppSec (ex - Veracode) Advance knowledge of Scripting tool (Python/Perl/Shell/HTML/PHP)
• Knowledge of federal & compliance regulations e.g. SOX, PCI & CPNI
• Working knowledge of web application development, RESTful APIs, and skills in Java, frameworks, python, Nodejs.
• Experience with mobile applications, and handset security.

Seniority level Seniority level Mid-Senior level

Employment type Employment type Contract

Job function Job function Information Technology and Engineering Industries Staffing and Recruiting, Information Services, and IT Services and IT Consulting