Position: Cyber Security Engineer IRC164334
Company: GlobalLogic
Experience required: 5y
English level: upper

You will work to develop new systems and procedures to counteract threat vectors that arise within our cloud and embedded environments. The ideal candidate will be a meticulous problem solver who can work under pressure when required and will remain current with the latest attack trends and technologies.

**Requirements:**
5-10 years of experience within a SOC (Security Operations Center), as a Cybersecurity Analyst, Cloud Platform engineer, Cyber Security Engineer, or equivalent experience
Ability to learn complex Cloud Security functions
Experience in Linux, Windows, and Macintosh operating systems
Understanding enterprise-level networking
Strong incident response background
Familiarity with SIEM, NIDS/NIPS, vulnerability scanning, centrally managed endpoint protection, and network threat hunting
Strong understanding of Cloud Security concepts
Bachelor’s degree in IT, Information Security, Cyber Security, Computer Science, Computer Engineering, or a related discipline
Education requirements may be substituted with SOC or cyber related experience on a scale of 4 years equal to a Bachelor’s, 2 years being equal to an Associate’s, or 1 year for each cyber related certification in Sec+, MCSA, RHEL, CEH, Splunk Core Certified User, AWS Security, or higher
Working knowledge of NIST (National Institute of Standards and Technology) 800-171 or related cybersecurity frameworks
Strong writing skills
Ability to translate highly technical concepts to non-technical individuals

**Preferred Qualifications:**
Cyber related certifications such as CompTIA CySA+, Sec+, CISSP, CHFI, Splunk Certified Power User, AWS certs, GCP certs
Experience in digital forensics
Familiarity with AWS
Familiarity with SDLC
Working experience within a DevOps environment

**Responsibilities:**
· Establish and Validate IAM (Identity and Access Management) across AWS (Amazon Web Services) and GCP (Google Cloud Platform)
· Build and monitor AWS Security Hub, Amazon Guard Duty, Amazon Inspector, Amazon Detective, and Amazon Macie
· Centralize and monitor all Vizio AWS organizations
· Clean up and maintain CloudTrail from security lens
· Design, implement, and troubleshoot security information and event management (SIEM) architecture
· Create, modify, and upgrade SIEM alerts, dashboards, macros, tags, and field alias
· Develop log ingestion and aggregation strategies
· Implement Disaster Recovery Plans, Standard Operating Procedures, etc.
· Create, modify, and upgrade vulnerability scanner scans/reports/dashboards
· Provide technical expertise in executing risk management activities such as disaster recovery, continuity of operations, and incident response
· Penetration test