Purpose of Position

The Cybersecurity Engineer will be part of the NetJets Cybersecurity Services team and provides leadership in the areas of: Vulnerability Management; Endpoint Detection & Response; Email Security; Data Analysis of security monitoring outputs; coordination of Remediation Patching; Analysis of threat landscape; Advise wide ranging teams on cyber risk and mitigation measures; and other daily Security and Compliance efforts.

The Cybersecurity Engineer will work in close collaboration with Security Incident Responders, Cyber Threat Intelligence Analysts/Operations and Cybersecurity Architects to improve the overall security posture of the firm. Tests, monitors and maintains information systems (IS) and cyber security policies, procedures, and systems, including access management for hardware, firmware and software. Ensures that IS and cyber security controls, policies and procedures are upheld and maintained. Identifies and helps mitigate security risks and exposures by leading investigations to determine the causes of security violations and suggests procedures to halt future incidents and improve security.

Tasks and Responsibilities

• Assists the team in proactively identifying security deficiencies or opportunities for improvement to enable secure global business by continuous evaluation and hardening of existing Cybersecurity Infrastructure platforms and solutions to prevent cybersecurity exploits
• Performs duties necessary to assist in establishing practices and system configurations to ensure the safety of information systems assets and to protect information systems from intentional or inadvertent access or destruction
• Collaborates with business stakeholders to provide security solutions that support their requirements
• Develops tactical and strategically prioritized remediations to address security gaps ensuring management is apprised of the risk in a timely manner
• Must stay up to date on the latest security trends, vulnerabilities, privacy legislation, and news items and communicate new finding with other team members
• Assist in research of mechanisms and tools for control compliance and in periodic audits of business entities to ensure continued compliance
• Provide Incident Response support for the enterprise and business units as needed
• Assist in providing consultative security expertise to business units and Corporate IT teams in support of projects as needed
• Provide continuous monitoring and research of real time alerts as well as tracking and reporting of policy violations

Education

Certifications and Licenses

Years of Experience

Core Competencies

Knowledge, Skills, Abilities and Other (KSAOs)

• Outstanding organizational, interpersonal and communication (written and verbal) skills.
• 0-1+ year experience with various standards (PCI/DSS, SOX, FedRAMP HIPAA etc.)
• 0-1+ years’ experience in an Information Technology security role.
• Gaining understanding of security technologies (NextGen firewalls, vulnerability management, endpoint security, DLP, etc.)
• Ability to manage changing workloads while maintaining a sense of priorities and delivering quality service within required timeframes.
• Ability to learn new technologies and applications and apply that knowledge to daily workflows.
• Attention to detail, organized and able to work and research independently.
• Demonstrated adaptability, analytical and problem-solving ability, and attention to detail.
• Solid understanding of web application security/OWASP Top10