Work with a cross-functional team to secure client organizations from threats and vulnerabilities as part of a broader information security program

Analyze and troubleshoot complex problems and provide technical and software solutions using a diverse mix of cutting-edge technologies.

Perform research, present analysis, and provide recommendations about systems, vulnerabilities, security controls, and recommend improvements which are consistent with business goals.

Break down complex requirements into clear, actionable tasks which can be estimated and completed.

Develop, document, design, implement, and test security controls for clients in conjunction with senior engineers

Gather, compile, and synthesize information in regard to technology, threats, vulnerabilities, threat models, processes, hardware, software, and people.

Be capable of automating tasks using programming languages with well-documented, readable, and maintainable code

Must possess strong interpersonal and communications skills; capable of writing purchase justifications, training users/team members in complex topics, making/giving presentations.

Write policy, procedure, standards, guideline, and other technical documentation and about the proper implementation of sound security program elements

Able to review logs and other metrics for signs of cyber threats or attacks and escalate to senior engineers

Able to test complicated and detailed aspects of a security posture or configuration, identify deficiencies, and recommend remediation actions

Be capable of continually improving one’s own skill set relevant to business and technical missions with minimal oversight. Must take initiative, negotiate with project management, and execute successfully on plans.

Able to participate in agile team practices; reflect honestly on own performance, participate in shared team accountability, recommend changes for team improvement

Must be able to handle sensitive information with appropriate discretion

Write manual and automated tests as part of a normal security practice.