Salary
💰 $102,000 - $215,000 per year
Tech Stack
Cyber SecurityGoJavaPerlPHPPythonRuby
About the role
- Support the auditing of security policies and procedures which safeguard infrastructure, systems, files and data.
- Perform Network Penetration testing.
- Conduct application, network, and operating system security assessments.
- Support investigations and research for possible computer security related incidents.
- Support Threat Intelligence activities.
- Assess incident response team actions and procedures.
- Assess Vulnerability Management programs.
- Assess security monitoring of clients, servers, applications, and network infrastructure activities.
- Conduct log analysis to identify suspicious or malicious activity and anomalous behavior.
- Represent cyber security on cross-functional IT project teams.
- Support the analysis, design, functional review and interpretation of requirements of security related hardware and software.
- Understand Data Protection risks and strategies.
- Apply knowledge of key regulations and industry standards such as ISO 27001&2, NIST SP800-53, NIST Cybersecurity Framework.
- Support continuous audit initiatives for the department.
Requirements
- Bachelor's degree or equivalent combination of education and work experience required.
- Degree in Accounting, Finance, or relevant specialty such as MIS, DIS, Computer Science, Mathematics preferred.
- CISA or CISSP or related certifications preferred but not required.
- 10-12 years of total work experience preferred.
- Prior experience in IT Audit or relevant specialty area preferred.
- Perform Network Penetration testing and conduct application, network, and operating system security assessments.
- Support investigations and research for possible computer security related incidents and Threat Intelligence activities.
- Assess incident response team actions and procedures and Vulnerability Management programs.
- Assess security monitoring of clients, servers, applications, and network infrastructure activities.
- Conduct log analysis to identify suspicious or malicious activity and anomalous behavior.
- Apply knowledge of key regulations and industry standards such as ISO 27001&2, NIST SP800-53, NIST Cybersecurity Framework.
- Knowledge of scripting/coding such as Java, Go, C, C++, C#, Ruby, Perl, Python, PHP, HTML, Assembler languages preferred but not required.
- Effective communication skills (both written and verbal).
- Understanding of applied and interpretation of analytics results for Audit, critical thinking and problem solving.