Mid-Level Cybersecurity Engineer

Cyber Force

Responsibilities:

• Perform continuous monitoring of customer s environments, review security events and alerts, analyze logs for anomalies, perform in-depth investigations on suspected incidents in the environment, and advise on containment and eradication response actions.
• Participate in Penetration Testing Assessments (e.g., Network and Application Penetration Tests).
• Participate in Vulnerability Assessments to identify network and system vulnerabilities while providing remediation activities.
• Participate in other Security Consultation Services such as Risk Assessment, Policies, and Procedure Review, Infrastructure Assessment, Information/li>
• Security Governance, Compliance PCI-DSS, ISO27001, and GDPR.
• Evaluate each customer s security needs and recommend best practices and standards accordingly.
• Participate in the creation and delivery of cybersecurity awareness content for respective customers.
• Ensure compliance with relevant regulatory requirements such as PCI-DSS, ISO27001, and GDPR.

Qualifications:

• Problem-solving skills.
• Excellent English Language Skills.
• Excellent Presentation Skills.
• Previous hands-on experience using SIEM or XDR solutions.
• Excellent awareness of cybersecurity trends and hacking techniques.
• Solid understanding of attacker tactics, techniques, and procedures.
• Solid networking, systems, and cybersecurity background.
• Solid understanding of OSI or TCP/IP model and protocols.
• Solid Knowledge of techniques for analyzing TCP/IP network traffic and event logs.
• Good Understanding of Security Incident Handling and Computer forensics.
• Good understanding of network troubleshooting.
• Good understanding of Microsoft Office products, Windows and UNIX operating systems, and Cisco and/or Juniper networking equipment.
• Good understanding of technology infrastructures concepts such as Firewalls, VPN, Data Loss Prevention, IDS/IPS, Web-Proxy, and Security Audits.
• Good Knowledge of cyber threat exploitation patterns, from discovery to establishing a persistent presence using Manual and Automated techniques.
• Previous experience in providing cybersecurity training is preferred.
• Knowledge of principles and frameworks of GRC (Governance, Risk, and Compliance). Relevant certifications such as CISA, CISSP, or CRISC are a plus.
• Knowledge in one or more of the following certificates: Security+, GSEC, GSOC, GCIA, CEH, CSA, relevant certifications, or courses.