Cybersecurity Engineer
Apply NowCompany: Abacus Service Corporation
Location: Oakland, CA 94601
Description:
Job description for temporary cybersecurity engineer :
What You'll Get to Do:
Leads the implementation of continuous and proactive vulnerability and configuration
scanning, identification, and remediation, to help ensure that patching and vulnerability
SLAs are achieved.
Work closely with other Support, Infrastructure, and Software engineering teams to
patch/remediate identified vulnerabilities, maintaining the functional operation of the
software and security posture.
Helps ensure risk is progressively minimized through the continuous improvement of
SLA timeframes and by leveraging risk-based analysis and prioritization.
Helps evaluate threat intelligence, develop threat mitigations, and prioritize
remediation activities.
Assists with analyzing, processing, and minimizing vulnerability exceptions.
Assists in reviewing, improving, and updating patch, vulnerability management and
configuration management policies and procedures.
Conducting operating system (OS) upgrades to ensure the security and integrity of the
technical environment.
Practicing safe cyber security methods and working within the District compliance
guidelines.
Conducting weekly, monthly, and quarterly, assessments and remediations.
Experience:
Recent experience with Azure/AWS, Microsoft System Center Configuration Manager
(SCCM), Windows Server Update Services (WSUS), and Tenable solutions (Nessus,
Tenabkle.io, and Security Center).
Working knowledge on cyber security organization practices, threat & vulnerability
management, and best practices.
Ability to work with vendors for implementing new configurations and troubleshooting
issues on scanning utilities.
Knowledge of various operating systems (i.e., Windows, Linux, Mac.) and networking
technologies commonly deployed to enterprise networks and accompanying
vulnerabilities.
Knowledge of third-party vulnerability management tools for reporting and operations.
Extensive knowledge in cloud computing such as Azure and AWS.
Strong conceptual and practical understanding of IT infrastructure designs, technologies,
products, and services. This should include knowledge of networking fundamentals,
protocols, firewall functionality, databases, and other technologies.
Knowledge of managing asset lists.
What You'll Get to Do:
Leads the implementation of continuous and proactive vulnerability and configuration
scanning, identification, and remediation, to help ensure that patching and vulnerability
SLAs are achieved.
Work closely with other Support, Infrastructure, and Software engineering teams to
patch/remediate identified vulnerabilities, maintaining the functional operation of the
software and security posture.
Helps ensure risk is progressively minimized through the continuous improvement of
SLA timeframes and by leveraging risk-based analysis and prioritization.
Helps evaluate threat intelligence, develop threat mitigations, and prioritize
remediation activities.
Assists with analyzing, processing, and minimizing vulnerability exceptions.
Assists in reviewing, improving, and updating patch, vulnerability management and
configuration management policies and procedures.
Conducting operating system (OS) upgrades to ensure the security and integrity of the
technical environment.
Practicing safe cyber security methods and working within the District compliance
guidelines.
Conducting weekly, monthly, and quarterly, assessments and remediations.
Experience:
Recent experience with Azure/AWS, Microsoft System Center Configuration Manager
(SCCM), Windows Server Update Services (WSUS), and Tenable solutions (Nessus,
Tenabkle.io, and Security Center).
Working knowledge on cyber security organization practices, threat & vulnerability
management, and best practices.
Ability to work with vendors for implementing new configurations and troubleshooting
issues on scanning utilities.
Knowledge of various operating systems (i.e., Windows, Linux, Mac.) and networking
technologies commonly deployed to enterprise networks and accompanying
vulnerabilities.
Knowledge of third-party vulnerability management tools for reporting and operations.
Extensive knowledge in cloud computing such as Azure and AWS.
Strong conceptual and practical understanding of IT infrastructure designs, technologies,
products, and services. This should include knowledge of networking fundamentals,
protocols, firewall functionality, databases, and other technologies.
Knowledge of managing asset lists.