Overview

The Senior Engineer Information Security Operations is responsible for assisting with day-to-day tasks that include pentesting, vulnerability assessments, and incident response. Responsibilities include threat modeling, identifying process gaps, and work closely with internal and external teams to address vulnerabilities based on findings from pentests performed. Communication skills are a must for this position. Coordinate operational and support aspects related to all information security related matters across the enterprise, including resource management and problem/situation management coordination.

This is not a full-time pentesting role.

Specialize Skills and Technologies

• Pentesting
• Vulnerability Management
• Web Application Testing
• Incident Response
• Computer Forensics
• Malware Analysis
• Ability to code in .NET or PowerShell

Primary Responsibilities

• Directs and participates in information security projects and supports team efforts for day-to-day operations
• Will act as the primary contact for all pentesting and web application testing
• Assists in the investigation of security-related events due to malware and/or phishing attacks
• Assists with follow-up on alerts received from user-reported email, SIEM solution, and/or IDS
• Assists with managing and monitoring the EDR solution and respond to threats in the environment
• Will be part of the on-call rotation to provide support on nights and weekends if needed
• Serves as a member of the team and as a mentor to other information security team members as needed
• Assesses the current information security program and makes recommendations regarding improvements

Minimum Qualifications

• Bachelor’s degree in related field or equivalent experience
• 10 or more years of work experience in IT
• 3 or more years of experience with utilizing a vulnerability scanner such as Nessus, Nexpose, Qualys, etc.
• 2 or more years of proven pentesting experience in an Enterprise environment
• In-depth knowledge of pentesting methodologies
• Relevant industry experience with a technical background
• Must have a deep understanding of Windows and Linux operating systems
• Must be willing to participate in an on-call rotational schedule
• Must be willing to perform pentests after-hours based on requirements of outside vendors
• Continually follow the threat landscape to stay on top of the latest vulnerabilities
• Ability to work effectively with technical and non-technical personnel in a cross-functional setting
• Strong balance of business acumen and technology knowledge
• Good verbal/written communication skills
• Self-starter/motivated
• Strong attention to detail
• Strong team player who can work across multiple functions and lead peers 
• Establishes and communicates clear priorities and sense of direction
• A good listener and collaborator who partners closely with others
• Expresses ideas in a clear, fluent, and concise manner to both technical, and non-technical audiences 
• Exceptional written, verbal and presentation communication skills

Preferred Qualifications

• Certified Information Systems Security Professional (CISSP)
• Any leading penetration testing certification – OSCP, eWAPT, eCPPT, GPEN, etc.
• Experience with vulnerability scanners
• Coding experience to include Powershell, .NET, C/C++, etc.

Physical Demands

• Physical demands include a considerable amount of time sitting and typing/keyboarding, using a computer (e.g., keyboard, mouse, and monitor), or mobile device
• Physical demands with activity or condition may occasionally include walking, bending, reaching, standing, squatting, and stooping
• May require occasional lifting/lowering, pushing, carrying, or pulling up to 20lb