Cyber Defense Engineer

Specific Accountabilities:

• Manage, deploy, and test dedicated cyber defense hardware and software solutions, including NGFW, IDS/IPS and WAF.
• Administer the updating of rules and signatures (e.g., intrusion detection/protection systems, anti-virus, and content blacklists) for specialized cyber defense applications.
• Conduct and/or support authorized penetration testing on enterprise network assets.
• Perform system administration on specialized cyber defense applications, systems and Virtual Private Network (VPN) devices, to include installation, configuration, maintenance, backup and restoration.
• Create, edit, and manage network access control lists on specialized cyber defense systems (e.g., firewalls and intrusion prevention systems). ii. potential conflicts with implementation of any cyber defense tools (e.g., tool and signature testing and optimization).
• Monitor vendor and third party security reports/lists and proactively patch vulnerabilities.
• Engage with internal and external partners to help design, test, and implement state-of- the-art secure operating systems, applications, networks, and database products/solutions.
• Assists in the planning, design and implementation of security measures created to safeguard access to resources, enterprise networks, computer systems, and data elements.
• Stay abreast of industry best practices in risk management techniques and integrate new methods and tools as appropriate

Knowledge, Skills and Abilities:

• Strong problem-solving and analytical skills; must possess the ability to make quick decisions and use good judgment in dynamic environments
• Strong verbal and written communication skills; can clearly and confidently communicate information security concepts to all areas of the business.
• Highly adaptable to a constantly changing business and technology environment.
• Technical knowledge in information security with emphasis on anti-virus, DLP, NAC or MDM Knowledge of computer networking concepts and protocols, and network security methodologies, including Virtual Private Network (VPN) security.
• Knowledge of host/network access control mechanisms (e.g., access control list).
• Knowledge of Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications
• Knowledge of Identity and Access Management (MFA, privileged access management)
• Knowledge of enterprise Data Leakage Prevention (DLP) security solutions.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of cyber threats and vulnerabilities, operational impacts of cybersecurity lapses
• Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, and non-repudiation)
• Bachelor’s degree in Information Systems, Information Technology, Management Information Systems, Computer Science, Computer Engineering, or related field.
• 1-3 years of experience in information security or network security.
• Professional Certifications preferred: Security +, Network +, SANS GIAC, CCNA Security, or CCSP.

Why join us:

• Ability to work remotely from anywhere in the world
• Close cooperation with the development team and client
• Opportunity to influence product development
• Professional growth: the certification preparation course is free for our specialists. The company pays for two attempts to pass the exam, regardless of the exam result
• We cover English classes (with a native speaker)
• Boost professional brand: you can participate in local conferences as a listener or as a speaker
• Regular team buildings: have fun with teammates
• Gifts for significant life events (marriage, childbirth)
• Tech and non-tech Zazmic Communities: support and share experience with each other