Cyber Security Engineer

12 month contract to direct hire positionM-F / Hybrid

As a Senior Cybersecurity Engineer you will be responsible for working with other Building Automation System (BAS) controls and software engineering team members to identify business, technology and product risks and vulnerabilities in the early stages and embed security requirements to address and validate them. This Sr. Cyber Security Engineer will also collaborate with product architects, system engineers, developers, and testers to implement secure designs by employing secure communications, network/device access control, authentication, authorization, cryptography, audit, forensics, and anomaly and misuse detection to provide information security (integrity, confidentiality, availability, and non-repudiation).

Basic Qualifications Bachelor's or Master's in Computer Science, Electrical Engineering or similar with an emphasis on cyber security8+ years of cumulative experience in software development and engineering expertise in Application, Network, Cloud, Mobile, IoT, ICS, Embedded systems, APIs5+ years of expertise in Product Security, Security Architecture and Security Assessment: Threat Modeling, Secure Development, Risk Assessment, Threat Analysis, DFMEA, Penetration testing, SDLA toolsStrong knowledge of current security threats, techniques, and landscape, as well as a self-motivated desire to research current in the cybersecurity landscapeStrong knowledge of OpenSSL, TLS mutual authentication, PKI, digital signatures, and certificate managementImplementation experience or knowledge of security controlsShould have good knowledge of security containers, hands-on experience with DevSecOps principles, and a good handle on end-to-end DevSecOps processes.Technical understanding of cloud-native architecture and engineering best practices (AWS, Azure, Google Cloud)Working experience with OWASP Top 10 for web applicationsKnowledge of penetration testing techniques, application security vulnerabilities, OWASP Top 10, SANS 25, CWE, etcKnowledge of Security Industry Standards and Frameworks: e.g., NIST, ISA/IEC, GDPR, SOC2Preferred QualificationsFamiliar with DISA STIG assessment and implementation for Linux and/or Windows systemsDesirable security certification(s): GICSP, GCLD, GSOC, GDSA, or any other relevant certifications.

Core Job ResponsibilitiesDefine and develop processes and methodologies for designing secure systemsEngage with teams to conduct security risk assessments and conform to organizational remediation/mitigation timelines in different phases of the secure product development lifecycleProvide product security support to development teams, including reviewing and explaining security tools and processes, providing vulnerability explanations and remediation guidanceOptimize product/system security by creating and reviewing architecture and detailed design solutions that reflect best practicesCoordinate product security program metrics and reportingSupport ongoing vulnerability and patch management through tracking, triaging and prioritizing across all products to minimize the potential security risk Help drive system and product requirements to meet the regulatory and compliance requirements (like GDPR, ISO, ISA/IEC, SOC2, FedRAMP) Assist with training and mentoring of security championsPartner with third-party vendors to deliver software security tools and servicesProvide expert consultation on application security requirements and best practices with vulnerability scanning and secure application designPartner closely on security operations tasks with cross-functional teammates in IT, DevOps, Engineering, Compliance, and TestManage 3rd party partners and vendors supplying cybersecurity-related servicesIdentify the design implications within a platform and system and work with teams to minimize vulnerabilitiesInfluence program decisions to reduce the risk exposure of the companyParticipate in Zero-day remediation, Hotfixes, and Incident Response effortsIdentify and review test coverage for the security aspects of the system

Equal Opportunity Employer/Veterans/Disabled Benefit offerings include medical, dental, vision, term life insurance, short-term disability insurance, additional voluntary benefits, commuter benefits and 401K plan. Our program provides employees the flexibility to choose the type of coverage that meets their individual needs. Available paid leave may include Paid Sick Leave, where required by law; any other paid leave required by Federal, State or local law; and Holiday pay upon meeting eligibility criteria. Disclaimer: These benefit offerings do not apply to client-recruited jobs and jobs which are direct hire to a client To read our Candidate Privacy Information Statement, which explains how we will use your information, please visit https://www.entegee.com/candidate-privacy-information-statement/ The Company will consider qualified applicants with arrest and conviction records.