Job Description: • A Security Engineer serves as the security engineer of complex technology implementations in a product-centric environment; is comfortable with bridging the gap between legacy development or operations teams and working toward a shared culture and vision; works to ensure developers create the most secure systems while enhancing the privacy of all system users; and has experience with white-hat hacking and fundamental computer science concepts. The Security Engineer will perform security audits, risk analysis, application-level vulnerability testing, and security code reviews; develop and implement technical solutions to help mitigate security vulnerabilities; and conduct research to identify new attack vectors.
Responsibilities: • Microsoft Azure and Microsoft Sentinel: Deep knowledge and hands-on experience with Azure services (IaaS, PaaS, SaaS) and Microsoft Sentinel for SIEM operations. Expertise in using Microsoft Sentinel to manage, investigate, and respond to security incidents. • KQL (Kusto Query Language): Proficient in writing and optimizing KQL queries for data analysis and automation within Azure Sentinel. • Networking and Security Protocols: Strong understanding of TCP/IP, LAN/WAN configurations, DHCP, DNS, and routing protocols. Familiarity with network security and infrastructure. • Encryption and Cybersecurity Frameworks: Solid grasp of encryption techniques and familiarity with cybersecurity frameworks like NIST, CIS, ISO 27001, COBIT, and PCI DSS. • Incident Response and Threat Analysis: Extensive experience in incident response management, including threat identification, analysis, response, and mitigation within a large IT organization. • Security Systems Expertise: In-depth knowledge of security systems including Intrusion Prevention Systems (IPS), Firewalls (Palo Alto, Zscaler), and Endpoint Protection Tools (Trellix/McAfee, Cisco Endpoint Security). • Vulnerability Management and Risk Assessment: Proven ability to conduct security risk assessments, manage vulnerabilities, and apply industry-standard security frameworks and controls.
Experience: • 3+ years in Incident Response: Direct experience in managing incident response for multiple platforms and operating systems, including real-time security monitoring and incident handling. • Risk Management and Compliance: Experience with security operations, control assessments, risk management, and compliance with security and privacy legal and regulatory requirements. • Systems and Software Security: Familiarity with managing the security of various operating systems (Windows, Unix, Mac) and databases (SQL, Azure, Oracle).
Skills: • This classification must have a minimum of ten (10) years of experience with developing and implementing technical solutions to help mitigate security vulnerabilities.
Education: • Professional Certifications: Certifications such as CISSP, CISM, or equivalent are highly desirable to demonstrate professional commitment and knowledge. • Educational Background: A Bachelor's degree in Computer Science, Information Security, or a related field, with a preference for additional security-specific qualifications.
About US Tech Solutions:
US Tech Solutions is a global staff augmentation firm providing a wide range of talent on-demand and total workforce solutions. To know more about US Tech Solutions, please visit www.ustechsolutions.com.
US Tech Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.