Junior Security Engineer

This is a remote position.

Position Overview

This position is within the cybersecurity organization at Digital Maelstrom. Candidates will work closely with other engineers, principal consultants, and various client contacts such as stakeholders, architects, business analysts, client IT personnel, and management.

This position is full-time.

Duties

Work with a cross-functional team to secure client organizations from threats and vulnerabilities as part of a broader information security program

Analyze and troubleshoot complex problems and provide technical and software solutions using a diverse mix of cutting-edge technologies.

Perform research, present analysis, and provide recommendations about systems, vulnerabilities, security controls, and recommend improvements which are consistent with business goals.

Break down complex requirements into clear, actionable tasks which can be estimated and completed.

Develop, document, design, implement, and test security controls for clients in conjunction with senior engineers

Gather, compile, and synthesize information in regard to technology, threats, vulnerabilities, threat models, processes, hardware, software, and people.

Be capable of automating tasks using programming languages with well-documented, readable, and maintainable code

Must possess strong interpersonal and communications skills; capable of writing purchase justifications, training users/team members in complex topics, making/giving presentations.

Write policy, procedure, standards, guideline, and other technical documentation and about the proper implementation of sound security program elements

Able to review logs and other metrics for signs of cyber threats or attacks and escalate to senior engineers

Able to test complicated and detailed aspects of a security posture or configuration, identify deficiencies, and recommend remediation actions

Be capable of continually improving one’s own skill set relevant to business and technical missions with minimal oversight. Must take initiative, negotiate with project management, and execute successfully on plans.

Able to participate in agile team practices; reflect honestly on own performance, participate in shared team accountability, recommend changes for team improvement

Must be able to handle sensitive information with appropriate discretion

Write manual and automated tests as part of a normal security practice.

Other duties as assigned.

Requirements

Required Qualifications

Experience with Windows, Linux, macOS

Experience with Command-line programs, Shell and Shell scripting

Understanding of networking fundamentals, protocols & application behaviors as related to security matters

Experience with secure configuration, implementation of systems

A solid understanding of best practices and techniques in attacking or defending information systems

Self-motivated

Preferred Qualifications

Have experience with network and web application penetration testing and related tools (OSCP preferred)

Have familiarity with software development processes and experience securing custom software

Cloud experience (any of AWS, Azure, Google Cloud)

Education

Bachelor’s Degree in Computer Science, Information Systems or related field; or certification in relevant programs (CISSP, CSSLP, OSCP, GPEN, GIAC, Security+, or others); or equivalent work experience.

Originally posted on Himalayas