Consultant, Cybersecurity Engineering & Operations

• Works on cybersecurity problems that may be diverse and highly complex, with particular emphasis on security operations
• Selects methods and techniques for identifying and advocating effective security solutions
• Specializes in security operations in one or more areas, including network, host, database, application, event management, cloud, cryptography, identity, and other emerging technology
• Participates in reviews of available tools, technologies, and processes to secure all aspects the enterprise
• Maintains and optimizes tools, processes, documentation, reporting, and technologies, and defines success criteria for their effective usage
• Deploys tools, processes, documentation, and technologies, and defines success criteria for their effective usage

RESPONSIBILITIES

• Works with a great deal of independence, and proactively identifies complex problems and implements solutions to those problems
• Acts as a subject matter expert and local leader for cybersecurity operations; contributes directly to the development of strategy, policy, standards, and procedures
• Partners with senior management inside and outside of the organization
• Specializes in security operations in one or more areas
• Works on cybersecurity problems that have high complexity, with particular emphasis on security operations
• Selects methods and techniques for identifying and advocating effective security solutions
• Participates in reviews of available tools, technologies, and processes to secure all aspects the enterprise

Essentials Skills (Must Have):

• Typically requires 7+ years of related experience in a professional role Certifications: One of these certifications CEH/CISSP/CySA+ Experience with Microsoft, Carbon Black, Secureworks or Crowdstrike EDR/XDR toolsets
• Understanding of SIEM, Endpoint Security solutions, Linux and Windows operatingsystems, Honeypots, Sinkholes and Malware Sandbox Technologies Incident Response & Threat Hunting Understanding
• Understanding of threat intelligence and threat modeling concepts
• Experience in working with ticketing systems (ServiceNow is Preferred), escalations andcrisis situations and continual service /operational improvement
• Advanced knowledge of cybersecurity components, principles, practices, and procedures
• Understanding of computer network exploitation (CNE) and computer network defense(CND) concepts
• Ability to research about targeted threat groups and their tactics, techniques andprocedures (TTP)
• Understanding of vulnerability and exploit analysis
• Experience in conducting network traffic analysis and the detection of malicious code onendpoint systems
• In-depth understanding about Windows and Linux System internals (process tree, eventIDs, registry, scheduled tasks, etc)
• Ability to clearly communicate technical observations to a variety of audiences, andstrong written and verbal presentation skills
• Organizational awareness - understanding of organizational dynamics and theinteractions among different stakeholders
• Eager to embrace new challenges and start new projects
• Possess high standard of integrity and confidentiality
• Strong sense of tolerance of change, uncertainty and urgency, and the ability to workunder pressure
• Flexible to support team during Public Holidays either in shift or On Call support
• Experience with collaborating with the Incident Response team for major incidents
• Experience with creating rules for noise reduction (suppression, whitelisting, customrules)

Preferred (Good to Have): Multiple security certifications from the following:

• SANS GCIA, GCIHCCNA, CCIE, NGFW

Specialization

• GREM, GCFE, OSCP (Threat Hunting specialist)Industry certification from vendors: ISC2, GIAC, EC-Council, Cisco, Juniper, CompTIA,ITIL, Unix, Microsoft, Oracle, etc.
• Experience performing root cause analysis for major incidents (ex Ransomware)
• Solid knowledge of Incident Response, Traffic and Malware Analysis, Forensics, Reverse Engineering and analysis of security and infrastructure logs Automation / Scripting / Programming experience