Security Engineer
Cyderes (Cyber Defense and Response) is a pure-play, full life-cycle cybersecurity services provider with award-winning managed security services, identity and access management, and professional services designed to manage the cybersecurity risks of enterprise clients. We specialize in multi-technology, complex environments with the in speed and agility needed to tackle the most advanced cyber threats. We leverage our global scale and decades of experience to accelerate our clients’ cyber outcomes through a full lifecycle of cybersecurity services. We are a global company with operating centers in the United States, Canada, the United Kingdom, and India.
About the Role:
Cyderes is looking for a dedicated, creative, and experienced Security Engineer to join our Cyber Defense team. This candidate should have a deep understanding of how networks, endpoints and servers interoperate inside a corporate IT or cloud environment. Prior experience with security operations, vulnerability management, change management, security awareness, risk reporting, and product ownership within large corporate environments is a must. Candidates will need to have a customer-first attitude and be comfortable interacting with a number of different stakeholders both internal to Cyderes and external-facing to customers.
Responsibilities:
- 3 or more years of progressing/in-depth cyber security experience
- Enterprise-level system administration experience with Windows, macOS, and Linux/Unix
- Experience supporting Endpoint Detection and Response tools such as Sentinel One, Crowdstrike, Microsoft Defender for Endpoint
- Experience with networking concepts and ability to analyze network artifacts
- Scripting or development experience in one of the following languages: Python, PowerShell, bash, etc.
- Understanding of business risk and how to properly advise a customer to improve their security controls
- Advanced understanding of the various threat communities and intrusion sets
- Formal education in computer science, cyber security, criminal justice, or similar
- ANSI accredited cybersecurity certifications such as CompTIA Security+, ISC2 SSCP, SANS GSEC
- Experience with deception technologies such as Thinkst Canary and Attivo Networks
- Experience with log management platforms such as Google Chronicle, Azure Monitor, Splunk, ELK stack (Elastic search/Logstash/Kibana)
- Cloud environments such as GCP, AWS, Azure
- Experience with SOAR (Security Orchestration and Automation) Platforms such as Siemplify, Demisto, Splunk SOAR, Cortex XSOAR
- Experience with penetration testing methodologies and validation procedures
- Experience mentoring junior members on a team
- Leadership & communication skills