The Senior Cyber Defense Engineer has responsibilities in multiple information security disciplines relevant to the team such as: incident response, vulnerability management, intrusion detection and prevention, threat intelligence, and security operations, in cloud and on-premise environments.
KEY RESPONSIBILITIES:
- Investigates and responds to cyber incidents within the network environment.
- Collects data from a variety of security monitoring tools, including intrusion detection system alerts, firewall and network traffic logs, and host system logs to analyze events that occur within the environment.
- Determines and documents information security requirements and controls necessary for the protection of information resources.
- Provides guidance and assistance regarding information security matters such as the interpretation of information security policies and requirements or their applicability to particular situations.
- Participates in information security incident response activities, risk assessment and risk management activities, and vulnerability assessment and vulnerability management activities spanning multiple business units.
- Participates in information security projects and initiatives.
- Performs operational tasks supporting information security functions such as intrusion detection and prevention, security monitoring, vulnerability remediation, security incident prevention and remediation.
- Supports, maintains, monitors, troubleshoots and enhances security monitoring and response tools, methodologies, software, and hardware.
- Analyzes data from Information Security tools and provides reports and recommended response actions to Information Security management.
- Represents Information Security to other organizations on information security related matters, as assigned.
- Publishes regular status reports and submits to management.
- Performs related responsibilities as required.
- Experienced cybersecurity professional, typically obtained through advanced education and work experience
- Works independently with minimal supervision.
- Leads other team members through specific tasks and provides guidance.
- Stands in for department leadership when they are unavailable.
- Establishing operational plans for job area; Developing and implementing new products, processes, standards or operational plans that will have impact on the achievement of functional results.
- Requires communication with cybersecurity and IT leadership and occasional communication with senior leadership across the enterprise.
MINIMUM QUALIFICATIONS:
- A bachelor's degree and six years of related IT experience including demonstrated advanced technical knowledge in multiple information security domains, OR an equivalent combination of education, training, and experience.
- Excellent task management and team participation skills. Good written and verbal communication skills.
NOTE: This role will be granted the opportunity to work from home regularly but must be able to commute to Emory University location as needed and at times, on short notice. Emory reserves the right to change this status with notice to employee.