Cybersecurity Engineer Analyst - Marquette, United States - Northcross Group

    Northcross Group
    Northcross Group Marquette, United States

    1 month ago

    Default job background
    Description
    Benefits:

    401(k)

    401(k) matching

    Competitive salary

    Dental insurance

    Employee discounts

    Health insurance

    Opportunity for advancement

    Paid time off

    Vision insurance

    Wellness resources

    Cybersecurity Engineer / Analyst

    About Northcross Group


    At Northcross Group (NCG), a Portland, Maine based system integration and cybersecurity firm, we support clients in the private and public sectors and address a variety of technology integration and cyber security initiatives.

    We provide quality business solutions and understand the importance of providing the same level of care to the people who will use it and the underlying data.

    These fundamentals—technology, data, and people—are all a part of the equation for success.

    Opportunity Description


    NCG is looking for a Cybersecurity Engineer with experience in assessing and building cybersecurity programs with a focus on penetration testing and DevSecOps.

    NCG supports clients in a broad range of industries (financial services, healthcare, transportation, and the Federal Sector) that are subject to number of regulatory requirements and industry standards for security.


    NCG seeks a Cybersecurity Engineer with the programmatic and technical experience to provide direct client support and assessment functions aligned to applicable compliance frameworks.

    The Cybersecurity Engineer will work with our team helping clients develop and manage compliant infrastructures honed to meet the current remote/virtual workforce needs while addressing requirements for data and system security and privacy.

    This position will play a lead role in defining NCG corporate strategy in the cybersecurity space and alignment with other NCG system integration service offerings.

    The Cybersecurity Engineer is responsible for performing penetration tests and security assessments on systems, networks, and applications. This role will also work with development and security teams to integrate security into the software development lifecycle.

    Role & Responsibilities


    We are looking for a hands-on Full Stack Developer with advanced technical skills to collaborate on software design solutions and build high-quality, innovative, fully performing software in compliance with coding standards and technical design.


    Responsibilities:
    Perform penetration tests and security assessments on systems, networks, and applications

    Identify and exploit vulnerabilities in order to assess and improve security posture

    Report findings and recommendations to development and security teams

    Work with clients to implement security improvements

    Work with development teams to fix security vulnerabilities

    Automate security testing and scanning throughout the software development lifecycle

    Develop and implement security best practices

    Train and educate developers on security best practices

    Engage with internal and external clients to ensure successful audience adoption

    Keep abreast of industry best practices

    Train and mentor junior team members

    Participate in NCG initiatives and contribute positively to our team environment

    Required Qualifications

    Bachelor's degree and at least two years of relevant professional experience

    3+ years of experience in penetration testing and/or security assessments

    2+ years of experience in DevSecOps

    Experience with cybersecurity frameworks (NIST, FISMA, CMMC, etc.)

    Experience with security testing and scanning tools

    Strong understanding of networking, operating systems, and security concepts

    Experience with scripting languages such as Python or PowerShell

    Strong problem-solving and analytical skills

    Excellent communication and teamwork skills

    Excellent written and verbal communication and exceptional attention to detail

    Preferred Qualifications

    Experience with offensive security tools and frameworks

    Certifications such as OSCP, CEH, or CISSP

    Experience with DevSecOps tools and practices

    Experience with containerization technologies such as Docker and Kubernetes

    Experience with cloud security tools and technologies

    Benefits

    At NCG, we have a commitment to excellence driven by continuous improvement across all areas of our business. We value our team members and offer competitive benefits, work/life balance, and opportunities for advancement.


    Benefits include:
    Competitive salary

    Employer-paid Health Insurance

    Dental Insurance

    Vision Insurance

    Employer contributing 401(k) Retirement Benefits

    Employer provided Life Insurance and Short- & Long-Term Disability Insurance

    Three weeks paid time off

    Eleven paid holidays

    Tuition and education benefits

    #J-18808-Ljbffr