We are seeking an experienced Cybersecurity Engineer to support Security Products for Local Governments. The ideal candidate will possess in-depth knowledge of configuring and administering Security Tools and Products.
Core Responsibilities
Measures for Core Responsibilities 40% Time
Administer and Maintain EDR Tools
- Tune detection rules to reduce false positives and improve threat visibility for each covered locality.
- Ensure asset inventory is accurate and up to date for each covered locality.
- Regularly update the EDR platform and agents to the latest versions.
- Review and adjust security policies.
- Health checks to ensure the EDR system is functioning properly.
- Investigate and remediate unexpected agent behavior.
- Ensure that integrations are working as required and troubleshoot when issues are identified.
40% Time
Administer and Maintain Vulnerability Management System
- Maintain and update the vulnerability management platform and agents.
- Conduct health checks to ensure the VMS system is functioning properly.
- Tune scan policies to reduce false positives and improve accuracy for each covered locality.
- Ensure asset inventory is accurate and up to date for each covered locality.
- Configure and schedule scans for each covered locality.
- Investigate and remediate unexpected agent behavior.
- Ensure that integrations are working as required and troubleshoot when issues are identified.
20% Time
General Support
- Respond to and resolve customer inquiries and issues submitted through the ticketing system and SOC.
- Maintain and update the Remote Monitoring and Management platform and agents.
- Accurately document customer interactions, troubleshooting steps, and resolutions.
- Escalate complex or unresolved issues as needed.
- Monitor ticket queues to ensure service level agreements (SLAs) are met and follow up with customers as needed.
Desired Certifications
- Security+
- Tenable Certified
- Additional Cybersecurity Related Certifications