Security Solutions Engineer

Job Description:

• Conduct and/or support authorized penetration testing on enterprise network assets.
• Prepare reports that identify technical and procedural findings and provide recommended remediation strategies/solutions.
• Perform technical (evaluation of technology) and non-technical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network and infrastructure, enclave boundary, supporting infrastructure and applications).
• Capture and analyze network traffic associated with malicious activities using network monitoring tools.
• Make recommendations regarding the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems and processes).
• Effective security event analysis and pattern identification.
• Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity.
• Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise.
• Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities.
• Provide technical summary of findings in accordance with established reporting procedures.
• Perform timeline analysis.

Job Qualifications:

• Experience with endpoint, network, and endpoint security solutions.
• Knowledge: Good knowledge of IT security controls.
• Bachelor’s Degree in Information Technology, Computer Science, Electronics Engineering or equivalent.
• Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks).
• Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored and nation sponsored).
• Knowledge of penetration testing principles, tools and techniques.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of cybersecurity and privacy principles.
• Knowledge of security implications of software configurations.
• Knowledge of network traffic analysis methods.
• Knowledge of packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
• Knowledge of how to use network analysis tools to identify vulnerabilities.
• Knowledge of OSI model and underlying network protocols (e.g., TCP/IP).
• Knowledge in security event analysis.
• Experience with Windows.
• Experience with Linux.
• Scripting skills.
• Familiarity with common and advanced vulnerabilities, exploits and attacks in Windows/Linux operating systems and web-based applications.
• Familiarity with malware analysis and digital forensics is an advantage.
• Knowledge of cyber defense and vulnerability assessment tools and their capabilities.
• Amenable to work in Marikina Head Office.