Sr. Cyber Systems Security Engineer - Zachary Piper LLC

Piper Companies is seeking a Senior Cyber Systems Security Engineer.

As the Senior Cybersecurity Engineer, you should be customer and solution oriented. Also, dedicated to enabling tools and processes that protect systems and information to ensure confidentiality, integrity, and availability.

Develop and maintain tools and processes that meet Information Security needs, taking insight from industry best practice where possible.

Educate users and technologists to align behaviors with best practices.

Duties/Responsibilities

Analyzes and recommends security controls and procedures in acquisition, development, and change management lifecycle of information systems, and monitors for compliance.

Integrate security tools using API interfaces with custom software to implement automation

Administers authentication and access controls, including provisioning, changes, and deprovisioning of user and system accounts, security/access roles, and access permissions to information assets.

Responsible for system security and vulnerability analyses and risk assessments through teams, vendors and/or outsourced providers in corporate and production environments.

Oversee DFIR capabilities in the investigation of security breaches, and assist with any associated legal matters

Specific skills required

8+ years of progressive security leadership experience in multi-disciplinary environments including enterprise-grade information technology infrastructure, technology support and cybersecurity with associated BS or MS degree.

Professional certifications such as AWS Certified Solutions Architect or Certified Information Systems Security Professional (CISSP) and others.

Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements or remediation.

Practical Threat Hunting and Intel experience

Experience in Offensive or Defensive Security techniques

Provide proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management.

Implements a metrics-based focus for measuring performance, availability, service levels, and vendors.

A thorough understanding of the organization's technology and IT systems with experience with developing, reviewing, and approving the installation requirements for LANs, WANs, VPNs, routers, firewalls, and related security infrastructure and devices.

Experience with the assessment, implementation, management, and documentation of a broad set of information security technologies and processes (e. g., app security, data protection, access management, network security) within a cloud environment.

Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies

Core functions of the Team:

Monitoring / Visibility:

• EDR – CrowdStrike
• Network/Perimeter Scanning – Qualys
• SIEM – Microsoft Sentinel
• Asset Management – CloudAware

Incident Response (IR):

• Provide real time triage and response to corporate incidents.
• Participate in InfoSec on call rotation (off hours support for above).

Vulnerability Management:

• Collaborate with production service owners to ensure all production risks are managed.

Audit Compliance:

• Collaborate with GRC to maintain PCI/SOC2/CFIUS
• Corporate policy maintenance

Bonus skills will help a lot with long term goals, but not are primary for today’s recruiting:

• Azure/Linux – Sentinel support processes run in Azure on Linux hosts.
• API/system integration skills to aid in integrating and automating these tools long term.

Compensation for the Sr. Cyber Security Systems Engineer include:

• Salary Range: $130,000-$145,000 -- $65/hr.– $75/hr. **depending on experience**
• Full benefits: PTO, Paid Holidays, Cigna Healthcare, Dental, Vision