Cybersecurity Engineer

Job Description

Cyber Security Operations

Location: Bridgewater, NJ

Work Type: 5 days onsite per week

Key responsibilities:

• Support enterprise-wide cyber security operations using vendor security monitoring tools
• Partner with vendors to pilot security solutions; manage proof of concept efforts and assist in implementing new security systems and devices
• Review and respond to vulnerability scans and issues
• Interface with the infrastructure team to perform security related activities
• Assist in investigations of root cause analysis for security events and incidents and develop security incidents reports and document incidents or breaches
• Conduct daily monitoring of key infrastructure and compliance monitoring activities
• Effectively communicate security exposures, misuse, or non-compliance situations
• Review and recommend enhancements to the overall security and risk management program
• Research, evaluate, and stay current on emerging security tools and technologies
• Exposure to zero trust concepts a plus and exposure to Zscaler double plus

Experience Range: With at least 8-10 years of experience in information security and cybersecurity operations, including substantial hands-on exposure to cloud security environments and vendor security monitoring platforms.

Key Responsibilities:

  1. Utilize vendor security monitoring tools to detect, analyse, and respond to cybersecurity threats across the enterprise.

  2. Lead pilot projects with security vendors, manage proof of concept initiatives, and implement advanced security systems and devices.

  3. Conduct vulnerability scans, prioritize remediation efforts, and track resolution of identified security risks.

  4. Coordinate with infrastructure teams to execute security-related activities and ensure compliance with organizational security standards.

  5. Investigate security events and incidents, perform root cause analysis, and prepare comprehensive incident reports documenting breaches and corrective actions.

  6. Perform daily monitoring of critical infrastructure and compliance activities to maintain a robust security posture.

  7. Communicate security exposures, misuse incidents, and non-compliance situations to stakeholders, providing actionable recommendations.

  8. Assess and recommend enhancements to the security and risk management program, driving continuous improvement.

  9. Research and evaluate emerging security tools, technologies, and industry best practices to strengthen organizational defenses.

Required Skills:

  1. Hands-on experience with vendor security monitoring platforms (e.g., Splunk, IBM QRadar, or similar)

  2. Expertise in vulnerability scanning and remediation tools (such as Nessus, Qualys, or Rapid7)

  3. Proficiency in security incident response and root cause analysis methodologies

  4. Strong understanding of network and infrastructure security protocols

  5. Experience with compliance monitoring tools and frameworks (e.g., ISO 27001, NIST, PCI DSS)

  6. Technical skills in integrating and deploying security systems and devices

  7. Ability to develop and document detailed security incident reports

  8. Knowledge of risk management principles and security program enhancement

Preferred Skills:

  1. Exposure to zero trust security concepts and architectures

  2. Experience with Zscaler cloud security solutions

  3. Advanced knowledge of threat intelligence platforms (e.g., Recorded Future, ThreatConnect)

  4. Experience with automation in security operations using scripting or orchestration tools

  5. Expertise in cloud-native security tools for AWS, Azure, or Google Cloud

Desired Qualifications:

  1. Bachelor''s degree in computer science, Information Technology, Cybersecurity, or a closely related discipline

  2. Relevant industry certification such as CISSP (Certified Information Systems Security Professional)

  3. Certification in cloud security, such as CCSP (Certified Cloud Security Professional) or equivalent