Mid-Level/Intermediate Cybersecurity Engineer/Analyst

Job Description:

Responsibilities:

1. Security Monitoring and Incident Response: Monitor security systems and tools to detect and respond to security incidents, anomalies, and threats. Investigate and analyze security alerts and events to determine the root cause and recommend appropriate remediation actions.

2. Vulnerability Management: Conduct vulnerability assessments and scans to identify security vulnerabilities in systems, networks, and applications. Prioritize and remediate vulnerabilities based on risk and criticality. Assist in developing and implementing vulnerability management processes and procedures.

3. Security Tool Administration: Administer and maintain security tools and technologies such as firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus/endpoint protection solutions, and security information and event management (SIEM) systems. Ensure the effective operation and configuration of security tools to support cybersecurity objectives.

4. Security Architecture and Design: Assist in the design and implementation of security architectures, solutions, and controls to protect the organization's infrastructure and assets. Collaborate with IT and development teams to integrate security controls into systems and applications.

5. Security Awareness and Training: Participate in security awareness and training programs to educate employees about cybersecurity best practices, policies, and procedures. Help develop and deliver security awareness materials and presentations to promote a culture of security awareness and compliance.

6. Documentation and Reporting: Maintain documentation related to cybersecurity policies, procedures, standards, and guidelines. Prepare reports and documentation for internal and external stakeholders, including security incidents, vulnerabilities, risk assessments, and compliance audits.

7. Compliance and Risk Management: Support compliance efforts by ensuring adherence to regulatory requirements and industry standards. Assist in conducting risk assessments and audits to identify and mitigate security risks. Help develop and implement security controls to address compliance requirements.

8. Collaboration and Support: Collaborate with cross-functional teams including IT, operations, compliance, and legal to support their cybersecurity needs and requirements. Provide technical support and assistance for security-related projects and initiatives.

Qualifications:

1. Education: Bachelor's degree in computer science, information technology, cybersecurity, or a related field.

2. Certifications: Relevant certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or GIAC (Global Information Assurance Certification) are desirable but not required.

3. Experience: 2-5 years of experience in cybersecurity or a related field, with a strong understanding of cybersecurity principles, concepts, and technologies.

4. Technical Skills:

   • Knowledge of security tools and technologies such as firewalls, IDS/IPS, SIEM, antivirus, etc.
   • Understanding of networking protocols, operating systems, and applications.
   • Familiarity with vulnerability management tools and processes.
   • Proficiency in Microsoft Office applications (Word, Excel, PowerPoint, etc.).

5. Analytical Skills: Strong analytical and problem-solving skills, with the ability to analyze security incidents, vulnerabilities, and risks.

6. Communication Skills: Excellent written and verbal communication skills. Ability to communicate effectively with technical and non-technical stakeholders.

7. Team Player: Positive attitude, willingness to learn, and ability to work well in a team environment.