Cybersecurity Engineer/Analyst

Company: MCNC
Location: Raleigh
Posted on: February 24, 2021

Job Description:

MCNC serves North Carolina's community of K-12 schools, Community Colleges, public and private Universities, state and local governments, and non-profit healthcare institutions. In this position, you will implement, operate, and improve solutions to solve cybersecurity challenges for clients in the MCNC community. As part of a growing security operations team, you will identify security issues and take action to proactively protect and remediate known issues on behalf of the community. You will also work to improve the operating environment by developing and implementing new processes and technologies to improve MCNC's response capabilities. Key Responsibilities/Duties--- Monitor and respond to alerts and events detected and generated by MCNC's growing portfolio of cybersecurity protection tools. Initial areas of focus will include endpoint protection, vulnerability management, and network security. --- Utilize available tools and information sources to proactively hunt across the MCNC operating environment to detect areas of potential concern related to cybersecurity. --- Ensure that operational security controls are correctly implemented and that they are performing effectively and efficiently on an ongoing basis.--- Respond to inquiries from the MCNC community regarding potential cybersecurity issues. --- Perform security incident response activities, including troubleshooting, triage, containment, recovery, and documentation.--- Collaborate with employees from other MCNC departments including Internal Systems, Network Operations, and Network Management, and MCNC's client consulting teams to ensure that actions are appropriate and timely.--- Recommend and implement improvements to existing processes and technologies to improve overall service delivery.--- Continuously research security trends to understand the latest threats affecting the MCNC community, and apply those learnings to MCNC's cybersecurity operations.--- Additional duties as assigned. Minimum Education, Experience and Skills Requirements--- B.S. in Information Security, Information Systems, Engineering, Computer Science, (or related field) or equivalent combination of education and experience.--- 3+ years of experience in a hands-on systems administration / technology integration role, with at least 1.5 years' experience in a security engineering/security operations administration role.--- Demonstrated experience working as an analyst in a security operations center or a security operations response role.--- Experience in security monitoring/intelligence gathering and analysis. This includes experience managing SIEM and/or log management tools such as Splunk, ArcSight, QRadar, Nitro, etc. Experience with SOAR / security automation platforms is a plus.--- Experience responding to security incidents, including coordinating response activities and serving as the primary security contact during an incident.--- Thorough understanding of and significant practical experience with TCP/IP networking.--- Experience with system administration on both Linux/Unix and MS Windows workstation and server operating systems. Experience using shell scripts for automating system administration activities.--- Experience coding/scripting with one or more of the following languages: Python, jQuery, JavaScript, PHP, Powershell, WMI, bash/ksh/sh, Java, Perl, etc. is a plus.--- Experience utilizing vulnerability assessment tools (Nessus, NeXpose, Qualys, etc.) to establish and maintain a strong security posture for organizational assets. --- Experience managing an enterprise malware defense program, including centralized management of endpoint malware protection software.--- Experience operating an enterprise patch management program to ensure that endpoint systems are protected with required security updates.--- Experience implementing operational security controls for cloud-based infrastructure (AWS, MS Azure, Google Cloud Platform, etc.) is a plus.--- Excellent written and verbal communication skills. Must be able to communicate effectively with coworkers, management team, MCNC customers, and vendors. Must be able to deliver written material and presentations to technical and non-technical audiences.--- Able to work in a responsible and proactive fashion collaboratively or with minimal direct supervision.--- Comfortable collaborating across department and organizational boundaries to establish positive working relationships and drive operational security improvements without direct control of, or supervision of assets.--- Relevant industry certifications (such as CISSP, CISA, GIAC, Microsoft, Red Hat, etc.) are a plus.
To apply for this position, please submit your resume to referencing the position title or visit our MCNC Careers page at
Disclaimer: The above statements are intended to describe the general nature and level of work performed by employees assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.
MCNC is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status or any other characteristic protected by law.

Keywords: MCNC, Raleigh , Cybersecurity Engineer/Analyst, Engineering , Raleigh, North Carolina