Job Details
Are you passionate about safeguarding critical systems and data from cyber threats? STACK Cybersecurity, a Managed Security Service Provider (MSSP) is seeking a talented Cybersecurity Engineer to join our team. As a key member of our MSSP, you ll play a vital role in maintaining the integrity, confidentiality, and availability of our clients networks, applications, infrastructure and security practices. Top candidates will thrive in both independent work and collaborative team environments, tackling a diverse range of technologies, security challenges, and event triage for several client systems simultaneously.
Technical Skills:
- Event Log Monitoring and Investigation:
- Monitor and investigate event logs for suspected activities.
- Identify potential security incidents and respond promptly.
- Threat and Vulnerability Analysis:
- Conduct threat and vulnerability analysis to assess risks.
- Propose mitigation strategies based on findings.
- Security Incident Handling:
- Investigate, document, and report any information security issues.
- Collaborate with relevant teams to address incidents effectively.
- Policy and Process Improvement:
- Recommend improvements to processes, policies, and procedures based on emerging threats and impacts.
- Stay informed about industry best practices.
- Ability to adhere to SOC2, Type 2 organization compliance.
- Communication Skills:
- Strong communication skills when interacting with external clients, vendors, and internal teams.
- Ability to articulate complex security concepts clearly.
- Understanding of Cyber Threats:
- Familiarity with prevalent cyber threats, including malware, phishing attacks, DDoS attacks, BEC, lay-and-wait, and man-in-the-middle attacks.
- Stay updated on evolving threat landscape.
- SIEM Proficiency:
- Use and understand Security Information and Event Management (SIEM) solutions.
- Leverage SIEM data for threat detection and incident response.
- Knowledge of Other Cybersecurity Tools:
- Familiarity with tools such as EDR (Endpoint Detection and Response), MXDR (Managed XDR), SASE (Secure Access Service Edge), intrusion detection systems (IDS), and vulnerability scanners.
- Problem-Solving Under Pressure:
- Apply problem-solving skills effectively even in high-pressure situations.
- Prioritize and address security incidents promptly.
- Effective Communication:
- Present security findings and recommendations to senior leadership.
- Excellent written and verbal communication skills.
- Attention to Detail and Organization:
- Strong attention to detail when analyzing security data.
- Organize findings and create comprehensive reports.
- Independence and Teamwork:
- Work independently on security tasks.
- Collaborate effectively within a team environment.
Additional Responsibilities:
- Risk Analysis Reporting:
- Create reports, summaries, presentations, and process documents to display risk analysis results.
- Communicate risk assessments to relevant stakeholders.