System Security Engineer

Overview

Kaufman Rossin is seeking an experienced Cybersecurity Engineer/Architect to join the Information Security department, working alongside Information Technology and Application Development to protect the confidentiality, integrity, and availability of company information and computing networks.

What you'll do

• Administer, operate and monitor information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats.
• Act as subject matter expert for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host-based security tools).
• Collaborate with IT to identify, evaluate and recommend new security technologies for suitability within KR's environment and security posture.
• Communicate ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels.
• Provide guidance for security activities and requirements in the system development life cycle (SDLC) and application development efforts.
• Create and update security documents such as policies, processes/procedures, and playbooks.

What you'll need

• Bachelor's or equivalent experience (certificates).
• 7-10 years of cybersecurity experience.
• 3-4 years of recent operational security experience (Security Operations Center (SOC), Security Engineering / Administration, Incident Response, Malware Analysis, IDS/IPS Analysis, etc.).
• Experience with endpoint protection technologies such as Anti-Virus, Endpoint Detection and Response, and Insider Threat platforms.
• Experience with network protection technologies such as IDS/IPS and inspection tools, core technologies like Identity Access Management tools, SIEM and SOAR platforms.
• Experience with Linux and Windows operating systems, enterprise SIEM, and packet capture analysis toolsets.
• Familiarity with MSFT SharePoint and other collaborative tools, and with controls/control measures for cybersecurity technologies (CIS, NIST CSF, NIST 800-53, CSA) and compliance and governance (PCI, SOX, GLBA, COBIT).
• Scripting and programming language skills (Python, PowerShell, Java, JavaScript).
• Understanding of the tactics, techniques, and procedures (TTPs) used by threat actors against endpoints, such as MITRE ATT&CK techniques.
• Strong written and verbal skills, and highly organized.
• Effective interpersonal skills, able to work well with business stakeholders to understand short-term and long-term business needs.
• Proven ability to work in a team-oriented, collaborative environment.
• Knowledge of regular expressions and at least one scripting language (PERL, Python, PowerShell).

Nice to have

• One or more security related certifications, such as: Certified Information Systems Security Professional (CISSP), GIAC, GCIH, Certified Information Security Manager (CISM), Certified Information Systems Audit (CISA), Certified Ethical Hacker (CEH).
• Vendor certifications on products and technologies (ex. MSFT, Crowdstrike, Mimecast, OKTA, DUO, etc.).

Details

• Location: Bengaluru, Karnataka, India.
• Hybrid work policy.
• Working directly with peers in the US.