Cyber Security Engineer

Essential Job Functions:

• Drafts, reviews, and maintains FRCC cyber security policies in accordance with the NIST CSF.
• Configures and maintains firewalls, security information aggregation and analysis systems, server and end point protection, and other security devices, systems, and software.
• Reviews security alerts and logs (or researches and recommends overseeing services to do so securely).
• Conducts assessments of cyber security controls.
• Oversees the assessment of FRCC controls, including policies and procedures, by third parties.
• Prepares for and remediates IT security audit findings.
• Assesses potential vendor security.
• Coordinates staff cyber security training.
• Assesses, vets, and implements access requests.
• Evaluates efficiency of implemented controls and associated costs.
• Follows secure IT practices, including all security related policies and procedures, throughout all IT work.
• Follows secure data handling practices, including all security related policies and procedures.
• Completes all assigned security training.
• Reports all observed security incidents and suspicious activities promptly and moves to remediate them immediately.
• Updates IT systems, services, and solutions within area of responsibility promptly to mitigate security threats.
• Keeps informed of emerging security threats as they relate to their other essential job functions.

Required Qualifications and Attributes:

• Bachelor’s degree in cyber security, or equivalent combination of education, certifications such as the CISSP or CIA, and related industry experience resulting in demonstrated ability to perform the primary duties.
• 5 years minimum of cyber security experience.
• Advanced proficiency with cyber security related systems including server and endpoint protection systems and security information aggregation systems.