Title:  Cyber Security Engineer I, 1st Shift   Req ID: 8629

City, State:  Westfield, WI

Reports to:  IT Security Manager 

Classification:  Exempt 

Work Arrangement:  Hybrid

JOB DESCRIPTION

Summary:  The Cybersecurity Engineer configures and implements solutions to resolve technical and business issues related to endpoint security. The incumbent acts as a subject matter expert (SME) for one or more endpoint security platforms such as SIEM, hardening, EDR, and Vulnerability Management. A successful candidate will use strong technical analysis skills to study threat actor techniques, network with other researchers in the security community to share information about threats and develop new tools and detection capabilities to uncover threats in network traffic and endpoint systems. The job duties include strong research and analysis skills, including understanding of malware analysis, reverse-engineering, defense evasion techniques, and engineering of detection capabilities.

Essential Functions:

• Maintain awareness of the latest critical information security vulnerabilities, threats, and exploits
• Identify and address performance issues with SIEM and Log Management platforms
• Perform care and tracking updates and maintenance of SIEM and Log Management tools
• Assist with security incident and event response when needed.
• Provide technical support and troubleshooting of SIEM and log architecture
• Engineer security solutions to meet business and security requirements
• Work with various IT teams to ensure secure configurations and engineering best practices
• Analyzes penetration test results and engages with technology partners and business units to resolve identified vulnerabilities and identifies areas of improvement with existing processes, procedures, and documentation.
• Responds immediately to security-related incidents. Perform investigative analysis of malicious artifacts, and provide thorough remedial solutions and analysis
• Author, update, and maintain SOPs, playbooks, work instructions

Required Qualifications:

1. Bachelors’ Degree and two years of Information Security experience or an Associate degree and four years of Information Security experience.
2. Security + or GSEC certification or similar certifications required or able to obtain within one year.

Preferred Qualifications:

1. Passion for cybersecurity.
2. Ability to work independently and function effectively as part of a team.
3. Experience working with SIEMs.
4. Ability to write scripts/code using Python, Perl, PowerShell, or an equivalent language.
5. Passion for learning about new information security related technologies, topics, hacker techniques, and overall security operations
6. Familiar with operation of both Windows and Linux based systems
7. Familiarity with Elastic Domain Specific Language (DSL) and/or Splunk Search Processing Language (SPL)
8. Advance knowledge and skills by attending training and conferences and sharing with other team members
9. Knowledge of kill-chain model, ATT&CK framework, and modern penetration testing techniques

Supervisory Responsibility: None

Work Environment: Office environment.  Subject to extended periods of sitting, working on PC and talking on telephone. Possibility for remote work depends on candidate’s skills.

Physical Demands: This position would be primarily sitting with little to no lifting or other physical demands.

Position Type: 1st Shift, Exempt, Potential on call.

Travel: Little to none except possibly for training.

Other Duties: Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Successful completion of a pre-employment drug test and background check are required.
 

Brakebush provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. Applicants must have the legal authorization to work for any employer in the United States. We are currently unable to sponsor or assume sponsorship of employment visas.

Brakebush is committed to adhering to compliance and applicable pay transparency laws in all states where we operate and any other states where we have a legal obligation.
 

#LI-Hybrid