Cyber Security Principle

Job Description - Cyber Security Principle (180002KM)

The Cyber Security Principle is a subject matter expert in cyber security defense and detection to design (in coordination with the Information Security Engineering Team) and execute best-in-class network monitoring, preventative and detective controls, forensics and investigations, security awareness (in coordination with the Information Security Assurance Team), security vulnerability management and cyber threat intelligence activities. The Information Security Operations Principle will play a key role leading in coordination with the Incident Response Team during incident and crisis response.

In addition, this role supports all aspects of a security event monitoring and response team. The Principle seeks continuous improvement of security events and proactively oversees research to identify emerging threats.

The Principle is both operationally focused in the defense of CWT s network, and strategically positions the organization in preparation for increasing complexity and emerging threats through best practice tool optimization. The Principle will produce weekly and monthly reports identifying trends and enhancements aligned with security posture and positioning.

• Oversee network traffic and security events to identify malicious activity.
• Enterprise-level experience performing incident triage, analysis, incident response, and remediation for computer network intrusions, web application and server attacks, insider threats, and malware infections.
• Coordinate with other members of the Cyber Security Services Team to ensure team cohesiveness.
• Coordinate with Business Unit and Corporate teams to provide remediation recommendations and mitigate security threat findings.
• Provide thoughtful leadership on current and future cyber security initiatives.
• Oversee the development and documentation of policies and procedures.
• Lead Cyber Security Incident Handling when necessary.
• Provide audit and compliance requests from internal and external entities with data as needed.
• Provide support for security-related projects as assigned.
• In-depth experience developing content in enterprise SIEM (Security Information and Event Management) platforms.
• Knowledge of adversary activities in cyber security with an understanding of intrusion set tactics, techniques, and procedures.
• Excellent verbal and written communication skills.

• Bachelor's Degree in Computer Science or related field or equivalent experience and CISSP and/or CCSP and/or AWS certifications (or ability to obtain within 6 months).
• 5-10 years of hands-on experience in all technical security domains.
• Strong technical background and understanding of emerging security trends.
• Background and style that elicits respect in the organization through management style, technical depth, customer service and results.
• Ability to influence others where there is no direct authority.
• Deep technical knowledge IT Network, Infrastructure, Software, Cloud, Mobile - scripting, coding, or automation skills (Python, Perl, Java, .NET).

Primary Location

Employment type
:
Standard

Job Family
:
Information Technology

Scope:
Global

Travel
:
Yes, 10% of the Time

Shift
:
Day Job

Organization
: P&T_Security & Risk

Experience Level: 3 to 5 years

As an Equal Opportunity Employer/Affirmative Action employer, the organization will not discriminate in its employment practices due to an applicant’s race, color, religion, sex, national origin, veteran status, disability status, sexual orientation, gender identity or any other federal, state or local protected class.

Use of this website signifies your agreement to the Terms of Use.

CWT also offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by filling out our contact form. In your message please include a description of the specific accommodation you are requesting and a description of the position for which you are applying.