ENGINEER, CYBER SECURITY III

Job Summary

GENERAL DESCRIPTION:

The Cyber Security Engineer is an individual contributor role supporting the global program to actively identify and remediate network, system and application vulnerabilities across Qualfon infrastructure. This role is responsible across all the global Qualfon assets, reporting results in a timely manner to relevant Security, Infrastructure and Application groups, advising through remediation.

As part of the Global Information Security organization, this role will need to develop strong relationships within Security and respective IT departments globally to successfully execute and manage the vulnerability assessment activities.

Area of expertise (Skills)

1. Plan and execute Vulnerability Assessments and Penetration Testing across Qualfon global infrastructure
2. Responsible for execution level role for planning, execute, monitor and support various in-scope technical activities.
3. Maintain team environment and execution to actively monitor the Qualfon global infrastructure against real-time cybersecurity attacks and help triage and manage the prospective incidents
4. Deliver timely execution and reporting in line with security standards to relevant teams with clear indications and explanations of in-scope remediation requirements
5. Use manual testing techniques and methods to gain a better understanding of the environment and validate false negatives/ positives
6. Identify gaps and areas of improvement for process and recommendations to fill identified gaps or implement change
7. Promotes and facilitates effective communication among the Information System, Security Engineering, Architecture, IT Operations and other departments or business units.

Other Skills and Experiences (Min)

• Knowledge and understanding of vulnerability scanning solutions such as Nessus, Qualys, Rapid7, Nexpose, and InsightVM.
• Strong knowledge of core security concepts such as but not limited to encryption, data protection, security design, privilege access, etc.
• Knowledge and understanding with programming languages such as Python, Ruby, Perl, etc.
• Strong team building vision to support better working environment and cross-skills
• Excellent communication representing good interpersonal skills and client handling
• Ability to transform and represent complex technical issues into easily understandable language and terminologies
• Willingness to learn new technologies rapidly and remain at the cutting edge of technologies
• Outstanding team player along with being an independent resource when needed

Education