Cyber Security Engineer

Skills

Bachelor's degree in Computer Science or a related field. 5+ years of working experience with incident detection incident response and forensics. Experience with vulnerability management endpoint security email protection Windows & Linux Security SIEM PAM tool and data loss prevention. Office 365 Security VSX and Endpoint Security. Experience with complex malware analysis and threat hunting. Experience in writing complex correlation queries in SIEM. Skill in writing scripts using Python PowerShell and Unix Shell scripting. Experience in working under pressure in a fast-paced environment. Must have strong attention to detail with an analytical mind and outstanding problem-solving skills. Must have an excellent awareness of cybersecurity trends hacking techniques and MITER ATT&CK and NIST Frameworks. Must have excellent communication skills both written and oral. Desired to have one of the certifications: OSCP C|TIA GCTI CCTIA and CCTHP Preferred technology experience with the following: Mimecast Email Protection Tenable.IO Carbon Black Defense Splunk AWS Data Guard Office 365 Security CyberArk

Description

Reporting to the Senior Security Engineer, IT Infrastructure, Moderna is seeking a Cyber Security Engineer with an analytical mindset and a detailed understanding and experience of the incident response process, advanced adversaries, PAM, SIEM, Web & Email gateway security, Cyber Kill Chain Model, and MITER ATT&CK Framework. The successful candidate will have meticulous attention to detail, outstanding problem-solving skills, work comfortably under pressure, and deliver on tight deadlines.


In this role, the Cyber Security Engineer must display an excellent understanding of patch management, vulnerability management, endpoint security, data loss prevention, threat hunting, and incident response to ensure success. Additionally, this role must be comfortable working with various technologies, security problems, and troubleshooting and resolving security problems.



Here’s What You’ll Do:


Plan, manage, monitor and implement upgraded security measures to protect the organization's data, systems, and networks.


Protect the organization's data and infrastructure by enabling the appropriate security controls.


Provide timely incident response to all system and network security breaches.


Perform log analysis using SIEM, generate dashboard and alerts, and detect security events.


Find evidence of illegal activity involving cybercrime offenses and examine computers that may be involved in other types of crime or malware infection.


Use expertise to protect computers from infiltration and determine how a computer was broken into or recovered lost files.


Use forensic tools and investigative methods to find specific electronic data associated with performing complex malware analysis.


Identify and test network and system vulnerabilities.


Conduct purple team activities.


Automate workflow processes via scripting with Python or similar.


Research and maintain information on current security threats and applying knowledge to the security capability


Participate in the change management process.


Perform daily administrative tasks, reporting, and communication with the relevant departments in the organization.