Threat and Vulnerability Management Engineer

FULL-TIME POSITION WITH MAJOR HEALTHCARE SERVICE PROVIDERNO WORK VISA SPONSORSHIP AND NO C2C – SEEKING GC OR CITIZEN FOR THIS POSITIONSEEKING LOCAL APPLICANTS ONLY Job Summary:Looking for a Threat and Vulnerability Management Engineer to join our healthcare client’s expanding Cyber Security team. A major contributor to the overall security initiatives. Job DescriptionProvide first-level response for security events including but not limited to intrusion detection, malware infections, denial of service attacks, privileged account misuse and network breaches.Coordinate with enterprise-wide cyber defense staff to validate network alertsEnsure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable levelWork with TVM vendor, work with various to to drive the remediation and track the process, Open CR and schedule scans & follow up scans, analyze potential exploitation scenarios, assess applicable security controls, and evaluate potential impact.Performing security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategyParticipating in planning and recommendation of modifications or adjustments based on exercise results or system environment.Implementing security measures assistance in disaster recovery and planning.Utilizing OSINT to effectively detect and prevent indicators of compromise in affected systems.Triaging according to organizational procedures to ensure that a genuine security incident is occurring.Providing daily summary reports of network events and activity relevant to cyber defense practicesProviding timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.Conducting research, analysis, and correlation across a wide variety of all source data sets (indications and warnings).Collaborating with stakeholders to resolve computer security incidents and vulnerability compliance.Documenting and escalate incidents (including event’s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.Analyzing identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.Monitoring and reviewing the most recent SIEM alerts to determine relevance and urgency.Providing metrics and reports around security monitoring by designing dashboards for asset owners and management consumptionContributing to the development and implementation of security architecture, standards, procedures and guidelines for multiple platformsDocumenting current case notes sufficient for effective shift handover, as well as reviewing current status via phone call or in person.Engaging in all forms of communications (e.g. phone calls, instant-messaging, web page updates) to ensure cases are efficiently investigated by all approved partiesRecommending new security tools to management and reports and provides guidance and expertise in their implementation.Reviewing and analyzing complex data and information to provide insights, conclusions and actionable recommendations provides direction and guidance on reports and analyses and ensures recommendations are aligned with customer/business needs and capabilities.Own and administratively manage all security tools and ensure it is monitored on a regular basis. Requirements:Bachelor in Computer Science, Information Security, or a related field.Minimum of 3 years of past experience in information security, especially in an analyst role on a Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC).Experience with any of the following systems/products also a plus: scripting, enterprise antivirus management, data loss prevention, malware detection, intrusion detection/prevention, penetration testing/vulnerability scanning, web application firewall.Excellent written and verbal communication skills and effective problem-solving skills required. Licensure, Registration, and Certifications:Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) Certification.