Staff Cyber Security Engineer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Collaborate with NBCUniversal divisions, enterprise IT, and Cyber Security to ensure that technology is designed and implemented securely.

• Perform comprehensive security and threat assessments of enterprise projects involving new or modified technology implementations.

• Integrate Information Security best practices and guidelines into system architecture.

• Act as a technical and engineering subject matter expert in network, application, cloud, and enterprise security controls.

• Work alongside the Cyber organization and business stakeholders to offer security guidance and mitigation strategies.

• Articulate the significance of Cyber programs and services to garner business support, trust, and commitment.

• Mentor team members to foster their development.

• Balance security protocols and policies with operational requirements to uphold the desired corporate security stance.

⛳️ Requirements

• Over 8 years of experience collaborating with business and technical teams to design and implement Cyber solutions.

• More than 8 years of experience advising business teams on threat mitigation best practices in one or more technical domains.

• Capability to articulate common threats to Network, Cloud, Web, and Application environments.

• Ability to ensure that Cyber requirements are comprehensible and clear throughout all project phases.

• Familiarity with OWASP Top 10 and CWE/SANS Top 25.

• Advanced technical expertise in at least one Cyber security domain.

• Excellent written and verbal communication skills, along with presentation abilities for both technical and non-technical audiences.

• Experience in developing and documenting security guidelines or best practices.

• Proficiency in using diagramming tools to illustrate secure designs and controls.

• Exceptional time management abilities.

• Experience with threat analysis and modeling using frameworks such as MITRE ATT&CK.

• Knowledge of Cloud Security Matrix, NIST CSF, and CIS Critical Security Controls.

• Understanding of PCI DSS, SOX, HIPAA, GDPR, and CCPA regulations.

• Extensive knowledge of IaaS, PaaS, and SaaS cloud services.

• Understanding of Cybersecurity Engineering/Operations, Incident Response, and GRC functions.

• A formal degree is not mandatory; relevant experience is prioritized.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) plan.

• Paid leave.

• Tuition reimbursement.

• A variety of additional discounts and perks.

• Fully remote work arrangement.