Description review
Cyber Security Engineer
Boardroom Appointments · South Africa · back to the listing
HR standards
52/100
needs work
Title ↔ description
68/100
needs work
Reads as
Security Engineer
100% confident
What this role officially is
ICT security administrator — ESCO, the EU occupation classification
ICT security administrators plan and carry out security measures to protect information and data from unauthorised access, deliberate attack, theft and corruption.
Also known as: network security administrator, system security administrator, ICT security administrators, IT security administrator
How others title the same work
Large employers
- Security Risk Management Specialist Canonical Ltd.
- Security Software Engineer Canonical Ltd.
- Senior Security Operations Engineer Canonical Ltd.
- Staff Security Operations Engineer Canonical Ltd.
- Ubuntu Security Engineer Canonical Ltd.
Startups
- Security Engineer (Bangalore, India) AiPrise
- Security & Trust Engineer Alex
- Elucid | Senior Security Engineer | Boston, MA | ONSITE (hybrid) | $130k–$170k Elucid
- Factory | Security Engineer | ONSITE, San Francisco, CA | Full-Time Factory
- Factory | Security Engineer | Onsite in San Francisco | Full-time Factory
What the listing never says
- No pay range published. Candidates cannot tell whether applying is worth their time. Pay transparency
- No location or timezone policy stated, so a candidate cannot tell where they may work from. Scope clarity
The listing, marked up
Nothing in the wording of this listing tripped a check. The scores above still judge how complete and coherent it is.
Minimum requirements:
• First Degree in Information Technology
• Information Security related Certification (CISSP / CISM / GCIA , an Appropriate professional accreditation GCIH / Ethical Hacking (CEH), Offensive Security Certified Professional (OSCP) is preferred, GPEN, advantageous.
• Experience in developing threat models, risk profiles, cyber-security risk and incident management, and a solid understanding of crime in the financial sector.
• Solid understanding and familiarity of the MITRE ATT&CK Framework.
• 5 to 8 years Experience performing threat hunting and leading threat hunting programs. Should also have experience in performing red team exercises.
• Must have 5 - 8 years experience and be very proficient with the common tools associated with cyber security operations centres e.g. proxy technologies, log management, correlation solutions, SIEM, SOAR and common security testing tools with solid understanding of voice and data networks, major operating systems, active directory, and their associated peripherals.
• Must demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity and the cyber-attack kill chain, organized crime/fraud groups and both state and non-state sponsored threat actors.
• Threat intelligence, research, develop and perform hunting activities to proactively detect threat actors and their techniques, tools and processes.
• Recognize possible successful / unsuccessful intrusion attempts to compromise the network through analysis and hunting activities.
• Ability to perform dynamic malware analysis and extracting IOC (Indicator of compromise) information. React to any CSOC alerting (EDR, Qradar) and review for validity or false positives and modify alerts as needed.
• Demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity and the cyber-attack kill chain, organized crime/fraud groups and both state and non-state sponsored threat actors.
Responsibilities:
• The Cyber Threat Hunter will proactively detect threats that evade traditional security controls.
• Research, develop, perform, and analyse the results of proactive and reactive host and network-based investigations to determine if malicious activity exists within the environment.
• Building customized threat hunts specifically tailored, including, malware research, to develop detections based off numerous inputs. In addition, the role will provide expert support to the cyber security incident response team and this role has a group wide mandate.
• Interface with industry peers to acquire and share Cyber Hunt best-practices in the sector.
Originally posted on Himalayas
• First Degree in Information Technology
• Information Security related Certification (CISSP / CISM / GCIA , an Appropriate professional accreditation GCIH / Ethical Hacking (CEH), Offensive Security Certified Professional (OSCP) is preferred, GPEN, advantageous.
• Experience in developing threat models, risk profiles, cyber-security risk and incident management, and a solid understanding of crime in the financial sector.
• Solid understanding and familiarity of the MITRE ATT&CK Framework.
• 5 to 8 years Experience performing threat hunting and leading threat hunting programs. Should also have experience in performing red team exercises.
• Must have 5 - 8 years experience and be very proficient with the common tools associated with cyber security operations centres e.g. proxy technologies, log management, correlation solutions, SIEM, SOAR and common security testing tools with solid understanding of voice and data networks, major operating systems, active directory, and their associated peripherals.
• Must demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity and the cyber-attack kill chain, organized crime/fraud groups and both state and non-state sponsored threat actors.
• Threat intelligence, research, develop and perform hunting activities to proactively detect threat actors and their techniques, tools and processes.
• Recognize possible successful / unsuccessful intrusion attempts to compromise the network through analysis and hunting activities.
• Ability to perform dynamic malware analysis and extracting IOC (Indicator of compromise) information. React to any CSOC alerting (EDR, Qradar) and review for validity or false positives and modify alerts as needed.
• Demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity and the cyber-attack kill chain, organized crime/fraud groups and both state and non-state sponsored threat actors.
Responsibilities:
• The Cyber Threat Hunter will proactively detect threats that evade traditional security controls.
• Research, develop, perform, and analyse the results of proactive and reactive host and network-based investigations to determine if malicious activity exists within the environment.
• Building customized threat hunts specifically tailored, including, malware research, to develop detections based off numerous inputs. In addition, the role will provide expert support to the cyber security incident response team and this role has a group wide mandate.
• Interface with industry peers to acquire and share Cyber Hunt best-practices in the sector.
Originally posted on Himalayas