Bmc Software Logo Bmc Software
⏩ Bmc Software Logo

Lead Cyber Security Engineer

πŸ’° $100,000 - $150,000 🌍 United States of America πŸ“… 07/05/2023

Apply

Job Description

##### Job Description :

You will be required to lead threat intelligence projects which may be
technology enhancements, new technologies, or new vendors. As a daily
activity, you'll will be required to coordinate the remediation of findings
from our threat intelligence tools. You should be passionate about monitoring
the threat landscape for emerging threats and the tools with which to detect
them.

#####
**Primary Roles and Responsibilities:**

* Responsible for identifying technology and process gaps relating to Threat Management and providing appropriate recommendations.
* Perform as a technical lead on projects delivering Threat Management functions.
* Provide regular reports to management on the overall threat management program, and act as the point of contact for status updates regarding vulnerabilities across multiple platforms and multiple business groups.
* Coordinate and monitor, management of vulnerabilities reported by third-party pen-tests, third-party monitoring tools, and internal audits.
* Provide technical leadership and direction on initiatives relating to information security and the Threat Management Program.
* Function as a technical mentor and point of escalation when needed.

##### **Experience/ Qualifications:**

* 5+ years of experience in cybersecurity or information technology security role, with specialization in cyber threat intelligence or offensive testing.
* Demonstrated analytical skills to determine what threat and intelligence requirements can be gathered from what sources, what inferences or assumptions can be determined and project threat scenarios.
* Strong understanding of network services, vulnerabilities, and attacks. Knowledge of application exploits and vulnerabilities. Knowledge of ports and services typical in the configuration of web servers, file servers, and workstations
* Previous experience leading small to medium sized projects to deliver Cybersecurity solutions
* Strong knowledge of web and application security, good working knowledge of cloud security as it applies to Threat Management.
* Strong written, communication, and presentation skills along with the ability to work in a highly collaborative environment
* Understanding of the OWASP Top 10 vulnerabilities. Familiarity with 3rd party libraries and remediations
* Candidates must be familiar with vulnerability attributes like CVEs, CVSS, and threat detection and hunting frameworks like MITRE ATT&CK framework.

##### **Nice to Have:**

* Experience implementing IT security compliance frameworks like ISO, PCI, HIPPA, SOX
* Well developed scripting skills in Python or PowerShell.
* Identifies opportunities for process and technical security improvements in the environment.
* Good deductive reasoning skills, creative thinker, curiosity.
* Analytical and detail-oriented individuals must have a passion for information security, creativity to identify gaps, and initiative to find the solution.
* Experience operating on Red and Purple Team exercises