Cyber Security Engineer II

Johns Manville is hiring a Cyber Security Engineer II to design, implement, and support complex enterprise security projects. The role manages security technologies and projects, collaborates with business and technical peers, and independently oversees incident response and investigations.

Responsibilities:

• Architecture (10%): Research, recommend, and implement technologies in area of responsibility
• Security Project Management (20%): Utilize project management skills to ensure timeliness and quality of security projects in area of responsibility
• Operational Security Management (30%): Security system management which includes technologies such as Cloud security, email security, data protection, endpoint security, Microsoft 365, and supporting tools used by the security team.  Specific area of expertise may vary depending upon area of responsibility
• Technical Collaboration (10%): Works with business and technical peers to implement security systems, new technology, and incident troubleshooting.   Provides training and coaching for JM systems users
• Incident Handling (30%): Oversee security incident handling. Respond to security events and perform analysis on detected or escalated events.  Develop and coordinate remediation plans for incidents. Provide forensic analysis of security violations and report investigation details to management. Analysis may be complex in nature and this role will manage the effort independently with little supervision

Requirements:

• Bachelor's degree, minimum of 5 years of IT experience OR
• 8 overall IT experience 6 years of which is in cyber/network security experience with one or more of the following certifications: CISSP, ENCE, SANS GIAC, Cisco CCSP, CISM or an applicable certification related to cyber/network security
• Expert level experience in security technologies for areas of responsibility which may require a mixture of skills in areas such as
• Email protection
• Cloud Security
• Endpoint management, deployment and security
• Threat management
• Vulnerability and penetration management
• Data Protection
• Insider threat management
• Identity Management
• Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR)
• Demonstrated skills in Incident Response best practices, processes, procedures and technologies
• Solid knowledge and experience with forensic best practices
• Ability to handle sensitive and confidential information
• Understanding of web application design, function and secure software development lifecycles preferred