Principal Cyber Security Engineer – Technology and Digital

This is a fully remote position, open to applicants in Florida.

📋 Description

• Develop, implement, manage, monitor, and enhance security measures safeguarding data, systems, and networks both on-premise and in the cloud.

• Assist team members in diagnosing security and network-related issues.

• Address incidents of system and network security breaches.

• Implement appropriate security controls to safeguard organizational data and infrastructure.

• Facilitate testing and identification of vulnerabilities within networks and systems.

• Communicate and report to relevant departments within the organization.

• Assess security requirements and establish best practices and standards for security.

• Design, implement, maintain, manage, and upgrade security measures.

• Supervise responses to security breaches affecting networks and their associated systems.

• Diagnose and resolve network and security incidents and issues.

• Lead penetration testing initiatives.

• Perform vulnerability assessments and scans to secure infrastructure and data.

⛳️ Requirements

• Bachelor's degree.

• At least 8 years of professional experience.

• Over 8 years of experience producing clean, high-quality code in an OOP language or framework, including Java, .NET, Python, or JavaScript frameworks.

• Knowledge of cloud security deployment and implementation challenges; AWS experience preferred.

• Experience in manually auditing source code to identify security vulnerabilities or programming capabilities.

• Proficiency in understanding, replicating, and mitigating OWASP Top 10 vulnerabilities using tools like Burp, ZAP, or Fiddler.

• Background in defining enterprise security architecture standards and understanding API security risks, OAuth, and JSON Web Tokens (JWT).

• Familiarity with CI/CD pipelines, build systems, and containerized architectures.

• Experience across various areas of information security operations, including vulnerability management, risk management, computer and network security, authentication and authorization, security protocols, and applied cryptography.

• Proven experience in guiding the implementation and support of information security policies, procedures, and best practices for company-wide computing and networking systems.

• Ability to train others in security protocols and incident resolution.

• Security certifications such as OSCP, CSSLP, GWAPT, CISSP, eWPT, CEH, or similar are advantageous.

• Experience in mobile app penetration testing is a plus.

🏝️ Benefits

• Opportunities for career growth and development with clear pathways and ongoing support.

• Comprehensive health and wellness resources that extend beyond traditional benefits.

• A wellness program designed to assist employees in eliminating their medical plan deductible, thereby reducing out-of-pocket healthcare expenses.

• Tuition reimbursement to facilitate continued learning and professional advancement.