Cybersecurity Engineer

Mbi Llc; Richmond (VA); On-site; USD 80,000 - 120,000; Full time

Job summary

A technology firm is seeking an experienced Cybersecurity Engineer to support Security Products for Local Governments in Richmond, Virginia. This role involves administering and maintaining EDR tools, managing vulnerability systems, and providing general support for customer inquiries. Candidates should possess in-depth knowledge of Security Tools and have relevant certifications such as Security+. The ideal applicant will be proactive in ensuring optimal system functionality and customer satisfaction.

Qualifications

• In-depth knowledge of configuring and administering Security Tools and Products.
• Experience in tuning detection rules for EDR tools.
• Familiarity with vulnerability management platforms.

Responsibilities

• Administer and maintain EDR tools to improve threat visibility.
• Update the vulnerability management system and conduct health checks.
• Respond to customer inquiries and maintain documentation.

Skills

Configuring Security Tools

Administering EDR Tools

Vulnerability Management

Troubleshooting

Customer Support

Job description

We are seeking an experienced Cybersecurity Engineer to support Security Products for Local Governments. The ideal candidate will possess in-depth knowledge of configuring and administering Security Tools and Products.

Core Responsibilities

Measures for Core Responsibilities 40% Time

Administer and Maintain EDR Tools

• Tune detection rules to reduce false positives and improve threat visibility for each covered locality.
• Ensure asset inventory is accurate and up to date for each covered locality.
• Regularly update the EDR platform and agents to the latest versions.
• Review and adjust security policies.
• Health checks to ensure the EDR system is functioning properly.
• Investigate and remediate unexpected agent behavior.
• Ensure that integrations are working as required and troubleshoot when issues are identified.

40% Time

Administer and Maintain Vulnerability Management System

• Maintain and update the vulnerability management platform and agents.
• Conduct health checks to ensure the VMS system is functioning properly.
• Tune scan policies to reduce false positives and improve accuracy for each covered locality.
• Ensure asset inventory is accurate and up to date for each covered locality.
• Configure and schedule scans for each covered locality.
• Investigate and remediate unexpected agent behavior.
• Ensure that integrations are working as required and troubleshoot when issues are identified.

20% Time

General Support

• Respond to and resolve customer inquiries and issues submitted through the ticketing system and SOC.
• Maintain and update the Remote Monitoring and Management platform and agents.
• Accurately document customer interactions, troubleshooting steps, and resolutions.
• Escalate complex or unresolved issues as needed.
• Monitor ticket queues to ensure service level agreements (SLAs) are met and follow up with customers as needed.

Desired Certifications

• Security+
• Tenable Certified
• Additional Cybersecurity Related Certifications