Cyber Security Engineer at Southern Talent Specialists Charlotte, NC

Comunidade Metodista; Charlotte (NC); Vor Ort; USD 80.000 - 120.000; Vollzeit

Zusammenfassung

A cybersecurity staffing agency is seeking a Cyber Security Engineer in Charlotte, NC. This role involves incident response, threat intelligence analysis, and working with various security tools. Candidates should have a minimum of three years of experience in the field and familiarity with cloud security solutions. This position demands strong analytical skills and knowledge of compliance regulations.

Qualifikationen

• Minimum three years of experience in cyber threat or information security.
• Knowledge of compliance regulations (e.g., SOX, PCI-DSS).
• Ability to evaluate system configurations against standards.

Aufgaben

• Responding to SOC alerts and analyzing security events.
• Providing tier II support for escalated incidents.
• Collaborating with vendors on escalations.

Kenntnisse

Vulnerability analysis

Cloud security

Incident response

Threat intelligence analysis

Scripting languages

Ausbildung

Security certifications (CISSP, GSEC, GCIH, CEH)

Tools

Tenable Nessus

Azure

Tripwire

Jobbeschreibung

Cyber Security Engineer job at Southern Talent Specialists. Charlotte, NC. Cyber Security Engineer

Job Description: The Cyber Security Engineer is responsible for second level security event/incident response, as well as the collection, analysis, and dissemination of cyber threat intelligence. These capabilities include timely collection of advanced warning of IT vulnerabilities or threats, thorough correlation, analysis, and storage of threat intelligence information, and operational support of the incident response process. The candidate will deliver and sustain enterprise management strategies and solutions from a governance, process, discipline, and technology standpoint to support enterprise environments, including cloud instances and on-premises data centers, covering threats, FIM, configuration management, incident response, and vulnerability management. Secondary roles include IPS, EDR, TIP tools, and other information security solutions.

Essential Functions of the Job:

1. Responding to SOC alerts by performing analysis and containment of security events.
2. Providing tier II support for escalated security incidents.
3. Supporting the Cyber Incident Response Team (CIRT) in detecting, analyzing, and containing attacks.
4. Operating the configuration management program to track configuration drift, working with asset custodians to correct deviations.
5. Operating the File Integrity Management program to track changes on critical systems.
6. Collecting threat intelligence, analyzing data for patterns, creating intelligence products using MITRE ATT&CK Framework.
7. Identifying security risks and exposures, determining causes of violations, and suggesting procedures to prevent future incidents.
8. Integrating systems and logs into threat management platforms or SIEM systems to protect assets.
9. Designing, testing, and developing alert content to identify threats.
10. Documenting incident response playbooks for new threats.
11. Maintaining understanding of attack vectors and emerging threats.
12. Sharing cyber security intelligence with partners, vendors, and law enforcement as needed.
13. Producing operational metrics weekly and monthly.
14. Collaborating with vendors and internal teams on escalations.
15. Recommending preventative and corrective security actions.

Knowledge and Skills Requirements:

• Minimum three years of experience in cyber threat or information security.
• Experience with vulnerability scanning tools like Tenable Nessus, analyzing results, and prioritizing remediation.
• Ability to evaluate system configurations against standards such as CIS benchmarks.
• Experience with FIM solutions, analyzing file changes, and investigating suspicious activities.
• Familiarity with compliance regulations (e.g., SOX, PCI-DSS, GLBA, Federal Banking regulations).
• Proficiency with cloud security and monitoring in Azure.
• Proficiency with incident response processes in Azure.
• Experience with configuration management scanning tools.
• Knowledge of file integrity management tools like Tripwire.
• Strong team skills and professional integrity.
• Ability to map threats and vulnerabilities using MITRE.
• Familiarity with STRIDE and OSI model.
• Understanding of security technologies (IDS/IPS, firewalls, AV, proxies, EDR).
• Understanding of scripting languages (JavaScript, Perl, etc.).
• Knowledge of cloud configuration and vulnerability scanning tools.
• Security certifications such as CISSP, GSEC, GCIH, CEH are preferred but not required.