Cyber Security Engineer III

Job Description

Job Requirements

We're looking for a full-time phenomenal Cyber Security Engineer to apply their expert knowledge and passion to help deploy the Phenom Cyber Security Architecture principles and controls to protect, detect and respond to threats, vulnerabilities and incidents.

What You'll Do

. Design and create new protection, detection and response techniques and improve existing ones, providing thought leadership for all design, implementation, and maintenance activities related to cybersecurity solutions.

. Create, automate, optimize, and continuously evaluate security solutions controls based on the Threat Intel inputs.

. Troubleshoot issues in production and other environments, applying debugging and problem-solving techniques (e.g., log analysis, non-invasive tests).

. Clearly document and diagram deployment-specific aspects of cybersecurity architectures and environments.

. Develop practical cybersecurity solutions to create and automate cybersecurity runbooks, playbooks, and knowledge base documents.

. Design and establish the requirements of cybersecurity solutions based on threat protection and incident response use cases.

. Develop custom cybersecurity solutions to reduce time-to-detect, time-to-remediate and monitor the health, wellness, and operational efficacy and efficiency of Phenom's Cybersecurity solutions and processes.

. Provide advanced subject matter knowledge based on Industry best standards and Cloud alliance guidelines and support for critical systems and services including application and security infrastructure on-prem and cloud.

. Ensure cybersecurity controls and services are configured with the correct posture to support business requirements based on the Phenom's Cybersecurity Architecture framework

. Participate in proof of concepts and other technical evaluations of cybersecurity technologies, designs, and solutions

. Stay abreast of cybersecurity emerging technologies and proactively assess and evaluate the adoption into the organization

. Lead technical discussions with business units and leadership to develop technical requirements and quickly assess security and compliance needs

Work Experience

What Do You Have:

Must Have

. Bachelor's degree or higher in related field

. 5+ years hands-on technical expertise in Cyber Security Engineering.

Specialized Knowledge

. Good understanding and hands-on experience with common security systems, including WAF, IPS/IDS, EDR, DLP, authentication systems, content filtering, etc.

. Experience developing detection logic for enterprise SIEM systems and with exploitation techniques and use case development.

. Experience in the detection and response to malicious activity using log data and alerts from cybersecurity solutions, systems and network devices.

. Coding Experience in Scripting & programming languages (such as Java, Bash, Python, PowerShell etc.) to use these skills to integrate cybersecurity solutions and automate the protection, detection and response processes.

. Experience supporting a Cybersecurity Architect framework through the development of procedural documentation (playbooks and runbooks).

. Understanding of Amazon Web Services cloud environments and its security controls and their corresponding challenges.

. Understanding of microservices architectures & distributed Platforms especially in the SaaS businesses

. Understanding of global frameworks and standards like NIST, ISO 27001/27002/27017/ 27018, GDPR, etc.

. An Information Security qualification or evidence of starting to work toward SANS GSEC, CISSP or similar certification.

. Thought leadership, critical thinking & problem solver, strong organizational skills, report writing skills to senior level, ability to prioritize and multitask