Senior Cyber Security Engineer - Los Angeles, United States - Safetrust Technologies

Description

Job Description

Leading transit company, in the San Francisco Bay Area seeks a Senior Cybersecurity Engineer.

We are seeking a seasoned Senior Cybersecurity Engineer to lead our efforts in securing our digital assets and infrastructure. This role is crucial for defending against cyber threats and ensuring the integrity and confidentiality of our data.

As a pivotal part of our cybersecurity team, you will spearhead initiatives to mitigate risks, enhance our security posture, and maintain high standards of cybersecurity across the organization.

Salary range- Between $150,000/yr - $200,000/yr depending on experience and qualifications.

Key Responsibilities

• Lead the charge in identifying cyber risks and offering insightful recommendations for enhancement based on thorough analysis and assessment.
• Strategize and oversee operational activities including threat monitoring, incident response, and vulnerability management, alongside identity and access management systems.
• Evaluate and recommend enhancements for security architecture and configuration of Identity and Access Management (IAM) systems.
• Develop, implement, and maintain robust cybersecurity measures to fortify the service infrastructure and safeguard organizational data.
• Craft and maintain custom security tools and scripts to streamline security assessments and red teaming activities.
• Create and maintain custom security tools and scripts to streamline security assessments and red teaming activities, ensuring efficient and effective cybersecurity operations.
• Plan, execute, and analyze complex attack scenarios to emulate advanced threat actors, contributing to the refinement of tactics, techniques, and procedures used by adversaries.
• Build, deploy, and manage security tools, automating security processes using Python or other languages.
• Develop and maintain comprehensive security documentation and communicate security updates to employees and stakeholders.
• Conduct tabletop exercises with internal stakeholders, draw insights, to recommend improvements based on lessons learned.

Qualifications

• 7+ years of experience in Cybersecurity.
• Extensive knowledge with Linux, macOS, and Windows internals.
• Proficiency in Endpoint Detection and Response (EDR) technologies and evasion techniques.
• Sound understanding of the Software Development Life Cycle.
• Hands-on experience with network security, encryption, threat modeling, discovery, vulnerability, and penetration testing.
• Familiarity with a variety of security tools and products (e.g., firewalls, antivirus, intrusion detection systems).
• Proficiency in network tools such as nmap, Wireshark, and Metasploit.
• Experience with systems like Windows Server 2016+, Active Directory, and Linux.
• Development experience in scripting languages like Python, bash, JavaScript, or Perl is a plus.
• Broad understanding of network protocols including SMTP, DNS, and HTTPS.
• Familiarity with the MITRE ATT&CK framework tactics and techniques.
• Proficiency in computer forensics and digital investigation skills.
• Excellent written and verbal communication skills.

Note:
This is a contract role, thus there is no eligibility for employee benefits.

There is flexibility to work remotely.


Job Type:
Contract


Experience level:
7 years


Schedule:
Monday to Friday

#J-18808-Ljbffr