Cyber Security Operations Engineer (Tulsa)

Cyber Security Operations Engineer

Location : Tulsa, OK

Description

The CSOC Operations Engineer III position is a technical leader responsible for the tactical execution of incident response, threat detection and continuous improvement of solutions which defend and protect our computer systems, information, and networks from intentional or unintentional access, modification, or destruction. This position is responsible for technical leadership in the design, planning, documenting and support of projects and cyber security solutions for the company. This position needs to intently focus on prioritization and always seek the improvement of processes and tools, providing recommendations to engineering and architecture teams. A successful CSOC Operations Engineer III will have a multidisciplinary background beyond cyber security, with advanced knowledge in fields such as client and server systems, networking, and application development. This position will also be responsible for ensuring systems and processes follow regulatory requirements, such as PCI-DSS, HIPAA and SOX. This position is responsible for the mentorship of other IT staff and performs third level support for incidents and issues.

Major functions for this position

Cyber Security Incident Response 15% of total job

• Lead Cyber Security Incident Response as an incident owner, direct incident response activities, provide real-time decision making and communicate with the incident commander.
• Function as a threat hunter, working proactively to seek out weaknesses and stealthy attackers, conducting penetration tests and reviewing vulnerability assessments.
• Continuously develop and improve security technologies, focusing on the development of automation and orchestration capabilities as it relates to incident response.
• Coordinate documentation of activities during an incident and provide status updates to the incident commander during the life cycle of the incident.
• Participate in post-mortem collections and after-action reviews to identify and remediate gaps in processes and technologies.
• Participate in regular table-top sessions with the CSIRT and E-CSIRT teams to evaluate readiness, address changes in company, external cyber security threats and impact.
• Participate in after action reviews to identify and remediate gaps in process or technologies.

Cyber Security Infrastructure Operations 60% of total job

Cyber Security Threat Operations 15% of total job

Technical Leadership 10% of total job

Position Specifications :

The required specifications (education, experience, and skills) are those that the employee must have to hold the position. Applicants applying for this position must possess the required specifications in order to be considered for the job. The desired specifications are those that are not required for the employee to hold the position, but the employee should try to obtain the desired education, experience, and / or skills to be effective and successful in the position.

Required education :

Desired education :

Required experience :

Desired experience :

Required skills :

Desired skills :

This position will require shift work that could include weekends and nights as dictated by support needs. On call 24 / 7. Must have knowledge of many areas and be able to switch between them rapidly. Must be able to work under pressure and provide guidance to Information Technology and business users during a crisis. This position will require ability to maintain absolute confidentiality of information or events due to the sensitivity of their natures.