Description review
Junior Security Engineer
Digital Maelstrom · United States · back to the listing
HR standards
51/100
needs work
Title ↔ description
82/100
solid
Reads as
Security Engineer
100% confident
What this role officially is
ICT security administrator — ESCO, the EU occupation classification
ICT security administrators plan and carry out security measures to protect information and data from unauthorised access, deliberate attack, theft and corruption.
Also known as: network security administrator, system security administrator, ICT security administrators, IT security administrator
How others title the same work
Large employers
- Security Risk Management Specialist Canonical Ltd.
- Security Software Engineer Canonical Ltd.
- Senior Security Operations Engineer Canonical Ltd.
- Staff Security Operations Engineer Canonical Ltd.
- Ubuntu Security Engineer Canonical Ltd.
Startups
- Security Engineer (Bangalore, India) AiPrise
- Security & Trust Engineer Alex
- Elucid | Senior Security Engineer | Boston, MA | ONSITE (hybrid) | $130k–$170k Elucid
- Factory | Security Engineer | ONSITE, San Francisco, CA | Full-Time Factory
- Factory | Security Engineer | Onsite in San Francisco | Full-time Factory
What the listing never says
- 25 bullet points. Long requirement lists deter qualified candidates, who read them as hard gates. Scope clarity
- No section describes what the person would actually do. Scope clarity
- No pay range published. Candidates cannot tell whether applying is worth their time. Pay transparency
The listing, marked up
This is a remote position.
Position Overview
This position is within the cybersecurity organization at Digital Maelstrom. Candidates will work closely with other engineers, principal consultants, and various client contacts such as stakeholders, architects, business analysts, client IT personnel, and management.
This position is full-time.Duties
• Work with a cross-functional team to secure client organizations from threats and vulnerabilities as part of a broader information security program
• Analyze and troubleshoot complex problems and provide technical and software solutions using a diverse mix of cutting-edge technologies.
• Perform research, present analysis, and provide recommendations about systems, vulnerabilities, security controls, and recommend improvements which are consistent with business goals.
• Break down complex requirements into clear, actionable tasks which can be estimated and completed.
• Develop, document, design, implement, and test security controls for clients in conjunction with senior engineers
• Gather, compile, and synthesize information in regard to technology, threats, vulnerabilities, threat models, processes, hardware, software, and people.
• Be capable of automating tasks using programming languages with well-documented, readable, and maintainable code
• Must possess strong interpersonal and communications skills; capable of writing purchase justifications, training users/team members in complex topics, making/giving presentations.
• Write policy, procedure, standards, guideline, and other technical documentation and about the proper implementation of sound security program elements
• Able to review logs and other metrics for signs of cyber threats or attacks and escalate to senior engineers
• Able to test complicated and detailed aspects of a security posture or configuration, identify deficiencies, and recommend remediation actions
• Be capable of continually improving one’s own skill set relevant to business and technical missions with minimal oversight. Must take initiative, negotiate with project management, and execute successfully on plans.
• Able to participate in agile team practices; reflect honestly on own performance, participate in shared team accountability, recommend changes for team improvement
• Must be able to handle sensitive information with appropriate discretion
• Write manual and automated tests as part of a normal security practice.
• Other duties as assigned1 .
Requirements
Required Qualifications
• Experience with Windows, Linux, macOS
• Experience with Command-line programs, Shell and Shell scripting
• Understanding of networking fundamentals, protocols & application behaviors as related to security matters
• Experience with secure configuration, implementation of systems
• A solid understanding of best practices and techniques in attacking or defending information systems
• Self-motivated
Preferred Qualifications
• Have experience with network and web application penetration testing and related tools (OSCP preferred)
• Have familiarity with software development processes and experience securing custom software
• Cloud experience (any of AWS, Azure, Google Cloud)
Education
Bachelor’s Degree in Computer Science, Information Systems or related field; or certification in relevant programs (CISSP, CSSLP, OSCP, GPEN, GIAC, Security+, or others); or equivalent work experience.
Originally posted on Himalayas
Position Overview
This position is within the cybersecurity organization at Digital Maelstrom. Candidates will work closely with other engineers, principal consultants, and various client contacts such as stakeholders, architects, business analysts, client IT personnel, and management.
This position is full-time.Duties
• Work with a cross-functional team to secure client organizations from threats and vulnerabilities as part of a broader information security program
• Analyze and troubleshoot complex problems and provide technical and software solutions using a diverse mix of cutting-edge technologies.
• Perform research, present analysis, and provide recommendations about systems, vulnerabilities, security controls, and recommend improvements which are consistent with business goals.
• Break down complex requirements into clear, actionable tasks which can be estimated and completed.
• Develop, document, design, implement, and test security controls for clients in conjunction with senior engineers
• Gather, compile, and synthesize information in regard to technology, threats, vulnerabilities, threat models, processes, hardware, software, and people.
• Be capable of automating tasks using programming languages with well-documented, readable, and maintainable code
• Must possess strong interpersonal and communications skills; capable of writing purchase justifications, training users/team members in complex topics, making/giving presentations.
• Write policy, procedure, standards, guideline, and other technical documentation and about the proper implementation of sound security program elements
• Able to review logs and other metrics for signs of cyber threats or attacks and escalate to senior engineers
• Able to test complicated and detailed aspects of a security posture or configuration, identify deficiencies, and recommend remediation actions
• Be capable of continually improving one’s own skill set relevant to business and technical missions with minimal oversight. Must take initiative, negotiate with project management, and execute successfully on plans.
• Able to participate in agile team practices; reflect honestly on own performance, participate in shared team accountability, recommend changes for team improvement
• Must be able to handle sensitive information with appropriate discretion
• Write manual and automated tests as part of a normal security practice.
• Other duties as assigned1 .
Requirements
Required Qualifications
• Experience with Windows, Linux, macOS
• Experience with Command-line programs, Shell and Shell scripting
• Understanding of networking fundamentals, protocols & application behaviors as related to security matters
• Experience with secure configuration, implementation of systems
• A solid understanding of best practices and techniques in attacking or defending information systems
• Self-motivated
Preferred Qualifications
• Have experience with network and web application penetration testing and related tools (OSCP preferred)
• Have familiarity with software development processes and experience securing custom software
• Cloud experience (any of AWS, Azure, Google Cloud)
Education
Bachelor’s Degree in Computer Science, Information Systems or related field; or certification in relevant programs (CISSP, CSSLP, OSCP, GPEN, GIAC, Security+, or others); or equivalent work experience.
Originally posted on Himalayas