Cybersecurity Engineering Analyst

Hope you are doing good.

Please find the attached JD.

Job Position: Cybersecurity Engineering Analyst

Job Location: Remote (Candidate needs to support CST or PST hours)

Job Description:

Years of experience:  8 - 15 Years

Mandatory Skill Set:

FedRamp Certification / FedRamp Implementation experience.

Delinea/Thycotic Secret Server, vulnerability management,

PCI Compliance,  Tenable and PAM experience.

Candidate should have worked on a Federal Project.

Job Description

Core Skills:

● Detail-oriented with strong organizational abilities.

● Foundational understanding of security principles.

● Excellent communication skills.

● FedRamp:

○ Possess FedRAMP Certification.

○ Proficiency in conducting scans, analyzing findings, and collaborating with teams for timely remediation to ensure compliance.

○ Capable of working both independently and within cross-functional teams.

Job Responsibilities

Technical Expertise:

● Privileged Access Management (PAM):

○ Strong proficiency with Delinea's Thycotic Secret Server/BeyondTrust.

○ Demonstrated knowledge of Active Directory and networking.

○ Thorough understanding of identity lifecycle management for privileged and user accounts.

● Exposure Management:

○ Extensive experience with Tenable and Wiz.

○ Proficient in executing various scans (daily, weekly, ad-hoc, monthly), including PCI Compliance, Web Application Scanning, Vulnerability Management, Attack Surface Management, and Identity Exposure.

○ Proven ability to coordinate vulnerability remediation efforts with asset owners (identified through Tenable/Wiz/Google Mandiant).

● Digital Certificates (DigiCert):

○ General understanding of digital certificate concepts.

● Access Reviews:

○ Privileged Access Reviews: Familiarity with Google Sheets and Mail Merge, along with a general understanding of Active Directory fields (e.g., nested groups, disabled/expiring accounts, Organizational Units).

○ AD Termination Reviews: Familiarity with Google Sheets and VLOOKUP commands, and a general understanding of Active Directory fields (e.g., disabled/expiring accounts, Organizational Units).

● Security Scorecard - Ground level work experience on issues like:

○ P1 Issues (Critical):

■ Ransomware infection detected.

■ Domain advertised as a ransomware victim.

■ Malware controller observed or malware infection.

■ Phishing infrastructure.

■ Alleged breach incident.

■ Anonymous open proxy.

■ Products susceptible to ransomware exploits exposed.

○ P2 Issues (High):

■ DB or RDP services exposed to the Internet.

■ Certificate revoked/expired.

■ SSH software supporting vulnerable protocols or weak ciphers/MACs.

■ SSL/TLS service supporting weak protocols or cipher suites.

■ End-of-Life (EOL) OS/Software.

■ Critical/High-Severity CVSS v3.0 Vulnerabilities.

■ Site not enforcing HTTPS.

■ FTP/Telnet/rsync/VNC/SMB/PPTP services detected.

■ Adware installation.

■ Missing SPF record.

○ P3 Issues (Medium/Low):

■ Certificate lifetime exceeding best practices or without revocation control.

■ Malformed SPF record or SPF record containing a softfail without DMARC.

■ Medium/Low-Severity CVSS v3.0 Service Vulnerabilities.

■ Missing Content Security Policy (CSP).

■ Insecure HTTPS redirect pattern or redirect chain containing HTTP.

■ Website not implementing HSTS best practices.

Akash Kumar Rai | Talent Acquisition Specialist

Amaze Systems Inc

USA: 8951 Cypress Waters Blvd, Suite 160, Dallas, TX 75019

Canada: 55 York Street, Suite 401, Toronto, ON M5J 1R7

D: +1

E: |

USA | Canada | UK | India

Amaze Systems is an Equal Opportunity Employer (EOE), and does not discriminate based on age, gender, religion, disability, marital status, race and also adheres to laws relating to non-discrimination on the basis of national origin and citizenship status.