Endpoint Security Engineer - remote

Company: Matrix Resources
Location: Beaverton
Posted on: September 15, 2020

Job Description:

Title: Endpoint Security Engineer Type: Contract-- -- -- -- ----Microsoft Defender Advanced Threat Protection SCOPE Perform cyber threat intelligence analysis, correlate actionable security events and collaborate with various internal teams to design, optimize and analyze security postures across local assets and enhance global security and operations. Perform data analysis by understanding the latest threat vectors, work with multiple teams within the Security Operations to help analyze indicators to generate actionable intelligence and insight into current threats. REQUIREMENTS Engage in incident response activities. Leverage threat intelligence to identify threats. Manage security in cloud infrastructures such as AWS and Azure. Integrate existing automation, security operations and monitoring systems. Serve as security liaison on select infrastructure, application, database projects and day-to-day app/data activities. Conduct security assessments to identify security gaps or vulnerabilities and recommend and prioritize remediation actions. Create and modify detections, signatures and custom alerting logic based on adversary activity, vulnerabilities and internal analysis. Maintain, upgrades and operates security operations platforms and tool sets (SIEM, vulnerability management, endpoint EDR, email security, etc.). Develop, documents and executes threat hunting operations to detect known adversary TTPs. Build threat models to quantify security risks against known adversary behaviors and campaigns. Detect and respond to advanced threats, actor techniques, anomalous or suspicious activity, combined with intelligence to identify potential and active risks to systems and data. --SKILLS 4+ years' experience with endpoint security and EDR products. Hands-on experience with MS Defender Advanced Threat Protection, Office 365 Advanced Threat Protection. Red, Purple team penetration testing, web application assessments, cyber threat simulation, social engineering, vulnerability management. Knowledge and experience with SDLC. Experience with Agile/SCRUM methodologies. Broad knowledge of security technologies and trends. Detailed knowledge of several cyber security domains. Proficiency with scripting and automation. Working familiarity with industry frameworks such as NIST CSF and CIS20. Ability to communicate complex technology solutions to diverse teams namely, technical, business and management teams. Excellent verbal and written communication skills. DESIRED Familiarity / working knowledge of Carbon Black. MS Defender Advanced Threat Protection, Office 365 Advanced Threat Protection, Azure Active Directory Premium and MS Endpoint Manager (Intune). Desire and ability to learn advanced O365 Services, Governance Policy, user role, security and best practices. Knowledge of Microsoft Cloud core concepts (PaaS, SaaS, IaaS) Azure Active Directory and how Microsoft's offerings (M365/Azure) align to these areas. Prior understanding around the importance of security and compliance concepts (e.g. common security attacks, privacy, GDPR, retention, etc.) EDUCATION Bachelor's degree in Computer Science or related field or equivalent combination of education and experience. Certifications a plus (CISSP, OSCE, OSCP, CISA, CEH, GSEC, or similar)

Keywords: Matrix Resources, Beaverton , Endpoint Security Engineer - remote, Engineering , Beaverton, Oregon