Cynet Systems

Collaborate with Information Security team and support other stakeholders in threat hunting and other activities.. Provide regular status updates and briefings to Information Security management and outside stakeholders.. 2 plus (2+) years of experience working with Endpoint Detection and Response (EDR) tools such as: FireEye HX, Carbon Black, Tanium, Microsoft Defender ATP, CrowdStrike Falcon Insight, and other equivalent toolsets.. 2 plus years of experience working with Antivirus (AV) tools such as: Microsoft Defender, Symantec Endpoint Protection, McAfee ePO, Bitdefender, and other equivalent toolsets.. Knowledge of MITRE Telecommunication & CK techniques preferred.

information security engineer

Job Description: Pay Range $62hr - $67hr <ul> <li> Implement, operate, administer, and maintain Clients endpoint security capabilities. </li> <li> Monitor and respond to alerts from CISCO AMP. </li> <li> Ensure all workstations and servers have recent AMPagent installed. </li> <li> Support incident response and maintenance of Incident Response Plan. </li> <li> Troubleshoot and be the technical point of contact for any issues that may arise from endpoint security instrumentation on Unix/Linux or Microsoft Windows systems. </li> <li> Conduct gap analysis and provide recommendations for improvements to the Clients endpoint security architecture. </li> <li> Develop technical mitigation and remediation strategies to deal with threats on Clients endpoints. </li> <li> Develop metrics to ensure the system is operating as designed, identify patterns of alerts and support analysis to drive improvements to our security posture. </li> <li> Provide monthly metrics for endpoint security. </li> <li> Collaborate with Information Security team and support other stakeholders in threat hunting and other activities. </li> <li> Provide technical expertise and operational planning support for implementing Endpoint Security products across Client endpoints. </li> <li> Document endpoint architecture, processes and procedures that go into endpoint security management. </li> <li> Provide regular status updates and briefings to Information Security management and outside stakeholders. </li> <li> Support security engineering assessments on new systems and major upgrades as bandwidth allows. </li> </ul> Education: <ul> <li> Bachelor of Science degree in computer engineering/science or related field. </li> </ul> Certifications: <ul> <li> CISSP. </li> <li> CCSP. </li> <li> CEH. </li> <li> Security+. </li> <li> Network+. </li> </ul> Experience: <ul> <li> Five plus (5+) years of related specialty IT experience (for example, but not limited to: system engineering, desktop engineering, scripting and packaging, network engineering, information security, etc). </li> <li> 4 plus (4+) years of experience administrating endpoint security solutions. </li> <li> 2 plus (2+) years of experience working with Endpoint Detection and Response (EDR) tools such as: FireEye HX, Carbon Black, Tanium, Microsoft Defender ATP, CrowdStrike Falcon Insight, and other equivalent toolsets. </li> <li> 2 plus years of experience working with Antivirus (AV) tools such as: Microsoft Defender, Symantec Endpoint Protection, McAfee ePO, Bitdefender, and other equivalent toolsets. </li> <li> Experience with troubleshooting Unix/Linux and Microsoft Windows systems. </li> </ul> Skills: <ul> <li> Knowledge of MITRE Telecommunication & CK techniques preferred. </li> <li> Solid understanding of security fundamentals and information security control frameworks. </li> <li> Basic technical understanding in the following areas: network communication using TCP/IP protocols, basic system administration, virtual systems, active directory architecture, cloud technologies, web proxies, etc. </li> <li> Good team player, self-confident, motivated, and independent, capable of working with little to no instructions. </li> <li> bility to multi-task and work under pressure in a fast-paced environment. </li> <li> ttention to details and good problem-solving skills. </li> <li> dvanced communications and presentations skills (verbal and written) enabling precise conveyance of information. </li> </ul> Associated topics: cybersecurity, identity access management, iam, information assurance, information security, information technology security, malicious, threat, violation, vulnerability

START NEW SEARCH