Cybersecurity Engineer

Overview

Dscout is seeking a Cybersecurity Engineer to join the Cybersecurity team, reporting to the VP, Compliance and Information, to reduce risk across the Dscout SaaS environment and internal IT systems.

What you'll do

• Lead the process to build security into the Dscout SaaS environment, applying security throughout the software development lifecycle.
• Collaborate with Engineering to plan and implement cybersecurity controls to protect the SaaS environment, including applying leading practices to secure AWS resources (e.g., VPCs, EC2 instances, and containers).
• Continually enhance security monitoring of the SaaS environment and internal IT services by implementing SIEM and working with Engineering to continuously improve logging and auditability.
• Assess evolving threats and develop recommendations to mitigate risk to Dscout.
• Provide weekly threat intelligence reports highlighting potential risk to the organization.
• Work side-by-side with Engineering to analyze, contain, and mitigate cyber attacks and other related incidents.
• Perform vulnerability monitoring and, where appropriate, ensure remediation.
• Participate in the development of security policies and processes.
• Assist third party risk reviews.
• Provide recommendations to continually improve security controls.
• Assist in development of security programs and efforts to promote security awareness.

What you'll need

• Experience working with developers to conduct security reviews and provide strong recommendations to manage risk.
• Strong understanding and practical use of OWASP Top 10 (web and AI).
• Experience securing AWS cloud environments and infrastructure as code solutions such as Terraform.
• Proven ability to implement security monitoring tools such as Datadog, including identifying relevant scenarios and ensuring proper logging.
• Experience responding to cyber attacks such as bots and account compromise, as well as threats like data leakage and infected computers.
• Strong knowledge of cloud computing environments.
• Working knowledge of security in software development and continuous integration/continuous delivery (CI/CD).
• Experience documenting and implementing security policies and processes.
• A minimum of 3 years of security experience.
• Good communication, documentation and presentation skills.
• Limitless curiosity and insatiable appetite to understand human behavior and relevant technologies.

Nice to have

• Knowledge of security frameworks and standards: ISO 27001, NIST, or SANS.
• Experience with HITRUST and/or SOC 2 certification.
• Bachelor's degree.
• CISSP, CCSP, or GIAC security certification.

Details

• Remote position; the company is unable to hire in Montana, Hawaii, Alaska, and Washington DC.
• Dscout participates in the E-Verify program in certain locations, as required by law.