Looking for Cyber Security Engineer at Newark, California, USA |
Email: [email protected] |
From: Tamkeen Aslam, Orbit People [email protected] Reply to: [email protected] Hi, Hope you are doing well. Please find below Job description, if you are interested and available, please send me your updated resume. Job title: Cyber Security Engineer Location: Newark,CA Job type: Onsite LOCAL CANDIDATES NEEDED Position Overview: We are seeking a highly skilled and experienced senior level Cybersecurity Engineer with a strong background in leading and building Cybersecurity for a medium size organization. The ideal candidate will have a proven track record of successfully building cybersecurity strategy/roadmap, implementing and operationally managing Governance, Risk and Compliance (GRC) framework, security policies, procedures, and tools, including Microsoft Cybersecurity tools such as Microsoft Defender, BitLocker, Intune and Zscaler. While experience in a mid-size pharmaceutical company is nice-to- have, it is not mandatory. This individual will play a critical role in enhancing our organization 's cybersecurity posture and ensuring the confidentiality, integrity, and availability of our systems and data. Key Responsibilities: 1. NIST Framework Implementation: Lead the design, implementation, and maintenance of cybersecurity controls based on the NIST Cybersecurity Framework. Translate NIST guidelines into actionable security measures that align with the organization 's risk profile and objectives. 2. Policy and Procedure Management: Develop, implement, and oversee security policies, standards, and procedures to ensure compliance with industry regulations and best practices. Continuously review and update these documents to address emerging threats and technologies. 3. Microsoft Cybersecurity Tools: Leverage your expertise with Microsoft Cybersecurity tools, including Microsoft Defender for endpoint protection, BitLocker for data encryption, Purview for data discovery, and Intune for endpoint management. Implement, configure, and manage these solutions effectively to enhance our security posture. 4. Security Tool Implementation and Management: Utilize your expertise with other security tools like Zscaler and KnowBe4 to implement, configure, and manage these solutions effectively. Monitor and fine-tune these tools to ensure optimal performance and threat detection. 5. Incident Response and Management: Collaborate with incident response teams to develop and refine incident response plans. Participate in security incident investigations, coordinate remediation efforts, and contribute to post-incident reviews to improve incident response processes. 6. Vulnerability Management: Implement and maintain vulnerability assessment processes to identify and remediate security vulnerabilities across the organization 's infrastructure and applications. 7. Security Awareness Training: Work with the training team to develop and deliver security awareness programs for employees. Leverage tools like KnowBe4 to simulate phishing attacks and improve the overall security awareness of the workforce. 8. Risk Assessment and Mitigation: Conduct regular risk assessments to identify potential security risks and vulnerabilities. Develop strategies to mitigate these risks and ensure that appropriate security controls are in place. 9. Security Audits and Compliance: Collaborate with internal and external auditors to facilitate security audits and compliance assessments. Provide necessary documentation, evidence, and explanations of security controls. 10. Technical Expertise: Stay up to date with the latest cybersecurity trends, threats, and technologies. Apply this knowledge to make informed decisions regarding security enhancements and improvements. 11. Collaboration and Communication: Work closely with cross-functional teams, including IT, operations, and compliance, to ensure that cybersecurity measures align with business objectives and operational needs. Effectively communicate security concerns and solutions to technical and non-technical stakeholders. Qualifications and Skills: Bachelor 's degree in Computer Science, Information Security, or a related field; relevant certifications (e.g., CISSP, CISM, CompTIA Security+) preferred. Proven experience implementing cybersecurity controls based on the NIST Cybersecurity Framework. Hands-on experience with Microsoft Cybersecurity tools, including Microsoft Defender, BitLocker, Purview, and Intune. Familiarity with security tools like Zscaler and KnowBe4. Strong understanding of security policies, standards, and procedures. Familiarity with vulnerability assessment and penetration testing tools. Excellent problem-solving skills and the ability to analyze complex security issues. Strong communication skills to convey technical information to both technical and non-technical audiences. Experience with security incident response and management. Knowledge of regulatory requirements and compliance frameworks (e.g., GDPR, HIPAA). Ability to work effectively both independently and as part of a team. Nice-to-have: Experience working in a mid-size biopharmaceutical company or similar industry. If you are a proactive and knowledgeable cybersecurity professional with a passion for implementing robust security measures and staying ahead of cyber threats, we encourage you to apply. Application Process: To apply, please submit your updated resume along with a cover letter detailing your relevant experience in NIST framework implementation, security tools management (including Microsoft tools), and policy development. Highlight any notable accomplishments that demonstrate your impact in enhancing cybersecurity within previous roles. Keywords: information technology California |
[email protected] View all |
Tue Sep 12 22:58:00 UTC 2023 |