Lead Cyber Security Engineer

This is a fully remote position, open to applicants in Florida.

📋 Description

• Develop, execute, manage, oversee, and enhance security protocols that safeguard data, systems, and networks both on-premises and in the cloud.

• Assist team members in diagnosing security and network-related issues.

• Address incidents of system and network security breaches.

• Implement necessary security measures to protect the organization’s data and infrastructure.

• Facilitate vulnerability assessments, scanning, and identification across networks and systems.

• Report and communicate effectively with pertinent organizational departments.

• Assess security requirements and determine optimal security practices and standards.

• Design, implement, sustain, supervise, and upgrade security measures.

• Direct responses to network and associated system security breaches.

• Resolve network and security challenges and incidents.

• Lead penetration testing initiatives.

• Ensure the security of infrastructure and existing data.

⛳️ Requirements

• Bachelor's degree.

• At least 7 years of professional experience.

• Over 7 years of experience producing clean, high-quality code in an object-oriented programming language such as Java, .NET, Python, or JavaScript frameworks.

• Knowledge of cloud security deployment and implementation challenges, with a preference for AWS.

• Experience in manually auditing source code for security vulnerabilities or programming skills.

• Capability to understand, replicate, and remediate OWASP Top 10 vulnerabilities and their implications.

• Familiarity with security proxies like Burp, ZAP, or Fiddler.

• Experience in defining enterprise security architecture standards.

• Understanding of common API security risks, OAuth, and JSON Web Token (JWT).

• Familiarity with CI/CD pipelines, build systems, and containerized architectures.

• Background in information security operations, encompassing vulnerability management, risk management, network and computer security, authentication and authorization, security protocols, and applied cryptography.

• Experience in guiding the implementation and support of information security policies, procedures, and practices across company-wide computing and networking systems.

• Ability to train others in security protocols and incident resolution.

• OSCP, CSSLP, GWAPT, CISSP, eWPT, CEH, or similar security certification is advantageous.

• Experience in mobile app penetration testing is a plus.

🏝️ Benefits

• Opportunities for career growth and development, with clear pathways and consistent support.

• Comprehensive health and wellness resources.

• A wellness program designed to help employees eliminate their medical plan deductible.

• Tuition reimbursement.