Senior Cyber Security Engineer

The Villages; Florida; On-site; USD 95,000 - 130,000; Full time

Benefits offered by this job

Medical (HSA/FSA)

401K and/or ROTH

PTO & Paid Holidays

Life & AD&D

Job summary

The Villages is seeking a full-time on-site Cyber Security professional to manage security, compliance, and incident response across our environments. You will monitor threats, perform vulnerability assessments, and document designs to align with security standards.

Responsibilities include proactive threat research, implementing security solutions, and coordinating with legal and operational teams to ensure rapid, compliant incident handling.

Qualifications

• Associate degree or equivalent; five years of related experience or training.
• One of these certifications: MTA/MCSE/MCSA/MCITP or equivalent.
• Additional certifications: Security+, GIAC, CEH, CISSP, CISM.

Responsibilities

• Monitor and respond to threat indicators and incidents using SOC tools.
• Assess threats and vulnerabilities across datacenter, cloud, network, and endpoints.
• Document system designs for compliance with security standards.
• Research and implement cyber security solutions to mitigate threats.
• Perform forensic data collection and incident reporting as needed.
• Collaborate with Legal and Security teams to address incidents.

Skills

Cyber security operations

Threat detection

Incident response

Security monitoring

Education

Associate degree or equivalent

Tools

SIEM

IDS/IPS

DLP

Job description

Within the spirit of “Making People’s Dreams Come True”, this position is responsible for focusing on all aspects of security, regulations, and compliance related to our business and our clients. These duties are accomplished while delivering Raving Fans customer service to both internal and external customers.

Full Time, On Site Position

Benefits for full-time eligible positions:

• Medical (HSA/FSA), Dental, and Vision
• 401K and/or ROTH
• PTO & Paid Holidays
• Basic Life & AD&D
• The Villages Charter School eligibility
• and much more!

Responsibilities:

Cyber Security Operations

• Proactively monitor and respond to threat indicators or incidents with Security Operations Center (SOC) software and tools including but not limited to: Anti-virus, Vulnerability management, Intrusion Detection and Prevention System (IDS, IPS), Security Incident and Event Monitoring (SIEM), Data loss prevention (DLP), Intrusion Detection/Prevention Systems (IDS/IPS) and Threat intelligence systems
• Perform threat and vulnerability assessments (Physical and Virtual) to ensure that systems are protected from known and potential threats (datacenter, cloud, network, server/desktop, BYOD, IOT, etc.).
• Research detected threats and evaluated additional IOCs via malware analysis, sandboxing, VirusTotal, etc. to further investigation and mitigation.
• Create Documentation of new and existing system designs for compliance with security standards and best practices.
• Research, recommend, evaluate, document, and implement cyber security solutions that identifies and/or protects against potential threats and responds to security incidents.
• Stay informed about current and emerging threats to general technology and to specific threats to The Villages or its customers through research and testing.
• Develop and document methods of proactively detecting/mitigating threats using threat intelligence, honeypots/traps, IDS, etc.
• Continually evaluate, test, and recommend new tools and security products to protect systems in the ever-changing threat landscape.
• Review, recommend, document, and implement Active Directory Group Policy Security Best Practices.
• Work closely with the Network division to monitor and investigate security related issues originating from Network division tools or reviews.
• Work closely with Security and Compliance Administrator to achieve cohesive forensic analysis and incident reporting.
• Provide 24x7 access for incident response, including log review, data collection, SOC tool research, and forensic capture of system information.
• Work with law enforcement, as required, to meet submission or reporting requirements.
• Communicate with legal representatives of customers when required.
• Provide post incident security reports detailing available information concerning attack, possible avenues of compromise, remediation actions, and any recommendations for preventing future attacks of a similar nature.
• Provide Tier II support to our Server Operations Engineers and Field Engineers
• Require use of our current ticketing system to keep track of work items, SLA, priorities, documentation of work performed and follow-up to our customers.
• Communicate with appropriate people using the most effective medium whenever there is an issue or possible outage of service. This includes notification when an issue or outage has been resolved.
• Advise Director of Cyber Security of any issues that affect our delivery of services to our customers promptly.
• All other duties as assigned.

Education & Experience Requirements:

• Associate degree (A.A.) or equivalent; and/or five (5) years of related experience and/or training; or equivalent combination of education and experience.
• At least one of the following Microsoft Certifications or current equivalents required: MTA, MCSE, MCSA or MCITP.
• At least one of the following or equivalent required: CompTIA Security+, GIAC Security Essentials, CEH, CISSP, CISM.
• Ability to demonstrate and apply understanding of the following: web content filters/proxies, email security capabilities, IDS, IPS, SIEM, DNS security practices, advanced log analysis, network monitoring, network flow analysis, packet capture analysis, network proxies, firewalls, anti-virus capabilities, Linux/UNIX command line, and access control lists.