Cybersecurity Engineer

Overview

Are you ready to be on the front lines of digital defense? As a Cybersecurity Engineer I, you’ll join a dynamic team dedicated to safeguarding our organization’s data and systems. From tackling vulnerabilities and risk mitigation to responding swiftly to SOC alerts, you’ll play a pivotal role in keeping threats at bay and ensuring our security posture remains strong. If you thrive in a fast-paced environment and have a passion for protecting what matters most, this is your opportunity to make a real impact

** This role will work fully on-site in Franklin, TN.**

• Planning, implementing, monitoring, and upgrading security controls for the protection of the organizations data, systems and networks.
• Monitor vulnerabilities and remediate issues for all devices and systems on the K-LOVE network.
• Responsible for preparing and documenting standard operating procedures and protocols.
• Support patch management implementation and process.
• Submit patch and vulnerability scan reports as defined by reporting manager.
• Help develop effective strategies for digital threat remediation and technology to orchestrate and automate responses.
• Provide detailed technical analysis of vulnerabilities identified (through scan results, research, vendor assessments, or static-code analysis) to determine impact.
• Establish and maintain documents of security incidents, process and procedures.
• Accumulate operational threat intelligence and maintain threat profiles of likely attackers.
• Perform security risk assessments, develop and maintain vendor scorecard.
• Assist Governance Risk and Compliance (GRC) Manager with ongoing business continuity management initiatives and disaster recovery.
• Work with GRC team on Payment Card Industry (PCI) compliance requirements, and initiatives to ensure operational effectiveness with applicable laws and regulations, as well as internal policies and procedures.
• Coordinate PCI audit-related tasks to ensure the readiness of managers and their teams for audit testing and facilitate the timely resolution of any audit findings.
• Monitor and maintain current knowledge of technologies and methodologies current to industry security trends and advances; and present recommendations as necessary through continued education and certifications.
• Conduct investigative analysis on investigations related to Human Resources, Incident Response, Special Investigations, and others as needed.
• Respond to incidents SOC alerts via security controls such as; web application firewall (WAF), file integrity monitoring (FIM), intrusion detection systems/ intrusion prevention systems (IDS/IPS), security information and event management (SIEM), endpoint detection and response (EDR), data loss prevention (DLP) and provide digital forensics (DF) as needed to incidents.
• Remediate Service Now incident tickets and participate in the change management process.
• Provide executive and operational reports on Vulnerability Management, Incident Response, etc.
• Ensure that the Ministry’s sensitive information and IT equipment are kept safe and confidential by implementing the correct security measures.
• Assist Senior Engineers in developing policies, procedures, playbooks, and standards that exceed existing and newly developed policy and regulatory requirements.
• Develop technical solutions and help implement security controls to help mitigate security vulnerabilities and automate repeatable tasks.
• Support Security Awareness training programs and assist in phishing test platform.
• Administer and support enterprise security controls.
• Daily administrative tasks, reporting and communication with the relevant departments in the organization.
• Partner with Team Members and other departments to troubleshoot and resolve issues.
• Maintain an inventory of all security applications and hardware in an organized manner
• Ensure all existing policies and procedures are stored in an organized and accessible fashion.

• Bachelor’s Degree in Computer Sciences, Information Systems, or equivalent experience.
• Security Plus certification will be given preference.
• 1-2 year of cybersecurity systems experience.
• Solid…