Cybersecurity Engineer I (Contract Talent)

Summary

Robert Half, one of FORTUNE’s World’s Most Admired Companies, is hiring for a Cybersecurity Engineer I to join the Information Security Services department. The Cybersecurity Engineer I develops and implements enterprise information security architectures and solutions, serving as a security expert while supporting incident response activities and ensuring compliance with security policies.

Responsibilities

• Design and implement operationally ready, best practices security solutions (tools and services) for basic to medium complexity projects to mitigate security threats and risks that may impact the business in areas including SIEM, Firewall, WIDS, WAF, DLP, RMS, Web proxy, Vulnerability scanning, and Virus/Malware management
• Support team and vendors in developing secure solutions to support business needs and to provide security review and certification to ensure best practice and quality delivery of all technical solutions that meet security requirements
• Execute technology refresh according to product roadmap and industrial best practices
• Assist with developing and maintaining an effective security analytics platform using tools such as Hadoop and/or Splunk to provide better security intelligence
• Assist with audits by documenting and demonstrating controls
• Play a critical role in the technical coordination and remediation of any needed incident response activities required during each Security Incident Response event
• Assist with technical assessments and research of computer related security incidents, including malware analysis, fraud detection packet level analysis, and system level forensic analysis to ensure the continuing development of security protection technology as it relates to defending and protecting RHI and its customers
• Assist with assessment of severity levels of security threats (e.g., incidents, vulnerabilities, malicious code) and coordinate the appropriate notifications or escalations in a timely manner to Director, Information Security
• Act as an escalation point to provide technical guidance to Security Operations when processing moderately complex user requests (via ServiceNow)
• Document and implement mitigation strategies for vulnerabilities discovered that may impact the company
• Articulate vulnerabilities, application defects, technical controls, risks, and other complex security matters with the Business in an easily understood manner
• Administer and monitor security profiles, review security violation reports and investigate possible security exceptions, updates; maintain and document security controls
• Participate in the evaluation of products and/or procedures to enhance productivity and effectiveness
• Support team and vendors to gather external project requirements as directed
• Collaborate with development teams to conduct Application Security assessments
• Support team in providing consultancy to internal customers on risk assessment, threat modeling, and fixing vulnerabilities
• Work overtime as needed
• Act as an on-call contact outside regular working hours as needed
• Remain accessible via assigned communication device as needed
• Travel as needed
• Work at various locations as needed
• Work a nonstandard schedule as needed
• Work evening or night shift hours as needed
• Provide coverage for other positions, shifts, or functions as needed

Skills

• Enrolled in an accredited undergraduate university in related field or equivalent experience
• Ability to communicate in-depth business processes to technical resources
• Ability to create complex process flow diagrams or flowcharts that demonstrate business or system process flow
• Working knowledge and direct experience managing complex security issues
• Ability to gather, combine and document requirements effectively to propose secure solutions
• Ability to perform fit/gap analysis based on requirements, create detailed and complex test plans and prioritize job responsibilities
• Ability to write complex queries and reports
• Ability to develop and manage project plans, meeting established deliverables and timelines
• Ability to create thorough and complex documentation, gather information and present status
• Ability to use good judgment and think outside the box in addressing unique information security challenges
• Ability to make sense of large security data sets using creative and out of the box thinking; experience with Data Analytics
• Ability to think independently and in team setting to ensure security issues are addressed in a manner consistent with security principles in mind
• Possess a security mindset
• Security+ license or certification a plus
• Working knowledge and experience working with cloud-based solutions and environments (IaaS, SaaS, PaaS), Security related technologies and solutions (firewalls, IPS, WIDS, WAF, SIEM, DLP, RMS, vulnerability scanner, web proxy, endpoint security, etc.)
• Network Security experience is a plus, working experience and understanding of the SDLC

Qualifications

Must Haves

• Enrolled in an accredited undergraduate university in related field or equivalent experience
• Ability to communicate in-depth business processes to technical resources
• Ability to create complex process flow diagrams or flowcharts that demonstrate business or system process flow
• Working knowledge and direct experience managing complex security issues
• Ability to gather, combine and document requirements effectively to propose secure solutions
• Ability to perform fit/gap analysis based on requirements, create detailed and complex test plans and prioritize job responsibilities
• Ability to write complex queries and reports
• Ability to develop and manage project plans, meeting established deliverables and timelines
• Ability to create thorough and complex documentation, gather information and present status
• Ability to use good judgment and think outside the box in addressing unique information security challenges
• Ability to make sense of large security data sets using creative and out of the box thinking; experience with Data Analytics
• Ability to think independently and in team setting to ensure security issues are addressed in a manner consistent with security principles in mind
• Possess a security mindset

Nice to Haves

• Security+ license or certification a plus
• Working knowledge and experience working with cloud-based solutions and environments (IaaS, SaaS, PaaS), Security related technologies and solutions (firewalls, IPS, WIDS, WAF, SIEM, DLP, RMS, vulnerability scanner, web proxy, endpoint security, etc.)
• Network Security experience is a plus, working experience and understanding of the SDLC

Benefits

• Benefits are available to contract/temporary professionals, including medical, vision, and dental, and life and disability insurance.
• Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan.