CYBER_SECURITY_ENGINEER

CYBER SECURITY ENGINEER

Intrusion monitoring, attack analysis, and incident response duties as required and directed.
Monitor open source feeds and reporting on the latest threats against computer network defenses.
Supports incident escalation and assesses probable damages, identifies damage control and remediation, and assists in developing courses of action.
Coordinate efforts of and provide timely updates to multiple teams during response.
Assists with implementation of counter-measures or mitigating controls.
May be called upon to assist with other Cybersecurity efforts such as firewall hardening and change control recommendation.

Understanding of OSI model, networking, protocol and service expertise
Understanding of network security best practices
Experience with Windows and Linux Operating Systems and common applications
Understanding of normal operating system behavior.
Experience with the use of network analysis tools and network security devices (firewalls, proxies, etc.)
Understanding of core networking concepts (TCP/IP, etc.) and common protocols (HTTP, FTP, etc.)
Understaning of digital forensics, file system, registry, etc. artifacts commonly associated with malware or malicious activities.
Understaning of digital forensics, Memory analysis
Understaning of digital forensics, Malware reverse engineering
Familiarity with automation concepts and proficiency in scripting languages such as python, perl, ruby, javasscript, powershell, etc.
Strong analytical skills and critical thinking skills
Effective communication skills (both written and verbal)
Sound decision-making and judgment, especially under pressure.
Strong organization, prioritization, and rationalization skills.