Security Engineer

Pyramid Technology Solutions is seeking a CSOC Security Engineer to work in a product-centric environment. The role involves performing security audits, risk analysis, application-level vulnerability testing, and security code reviews while developing technical solutions to mitigate security vulnerabilities.

Responsibilities:

• Perform security audits
• Conduct risk analysis
• Perform application-level vulnerability testing
• Conduct security code reviews
• Develop and implement technical solutions to help mitigate security vulnerabilities
• Conduct research to identify new attack vectors

Requirements:

• A Security Engineer serves as the security engineer of complex technology implementations in a product-centric environment
• Is comfortable with bridging the gap between legacy development or operations teams and working toward a shared culture and vision
• Works to ensure developers create the most secure systems while enhancing the privacy of all system users
• Has experience with white-hat hacking and fundamental computer science concepts
• Will perform security audits, risk analysis, application-level vulnerability testing, and security code reviews
• Develop and implement technical solutions to help mitigate security vulnerabilities
• Conduct research to identify new attack vectors
• Knowledge and experience in safeguarding sensitive data from cyber-attacks
• Minimum of ten (10) years of experience with developing and implementing technical solutions to help mitigate security vulnerabilities
• Two years of experience within the last three years triaging SecureWorks investigation alerts or similar, and alerts
• Two years of experience within the last three years triaging CrowdStrike alerts and events or similar, and events
• Two years of experience within the last three years triaging Elastic security alerts and events or similar, and alerts
• One year of experience within the last two years performing administrative and daily operational tasks within CRIBL or similar
• One year of experience within the last two years investigating high-risk users, phishing emails within Microsoft Defender for Identity or similar