Senior Cyber Security Engineer

External

Stackav · Pittsburgh, PA

Full-timeRemoteToday

AnsibleCI/CDClassificationDevSecOpsDNSDocker

Cover Letter Connect

Prepare for this interview

Elite

AI-generated questions, company research, and talking points tailored to this role

About the role

The Cyber Security team itself is responsible for securing Stack AV's environment, including on-prem and cloud resources, remote users, data, and the vehicles themselves. The Cyber Engineering role at Stack AV is responsible for developing and maintaining new threat detection capabilities, triaging and tuning security events and incidents, and leading security investigations and incident response efforts. The primary focus of this will be developing threat detection capabilities and responding to security incidents involving Stack's infrastructure, data, and users across private cloud, public cloud, SaaS, on-prem, and remote user environments.

Requirements

Required

Experience working with and managing Security Information and Event Management (SIEM) tools such as Splunk, Sumo Logic, Elastic, etc.

Threat hunting experience endpoint, network, DNS, email, EDR, and audit logs, as well as netflow and packet captures.

Experience working with and managing utilizing Endpoint Detection and Response (EDR) tools such as Crowdstrike, Sentinel One, Microsoft Defender, etc.

Thorough understanding of MacOS, Linux, and Windows hardening and security best practices.

Experience creating threat and DLP signatures for network, endpoint, email, and cloud/SaaS security solutions to identify potential attacks, exploits, or data exfiltration attempts.

Extensive experience developing and automating incident response policies.

Experience delivering complex projects, including coordinating and driving issues to resolution utilizing excellent technical troubleshooting skills.

A drive to learn and work with industry leading technologies.

An understanding of network orchestration and automation with Python, Ansible, and Terraform. Any experience automating security operations tasks or using SOAR platforms is a plus.

Experience with DevSecOps practices, including securing containerization technologies (Kubernetes, Docker, etc), artifact repositories (Artifactory, CodeArtifact, etc), and CI/CD or version control systems (GitHub, GitLab, etc).

Preferred

Experience working with Security Access Service Edge (SASE) solutions such as Zscaler, Prisma Access, Netskope, etc.

Thorough understanding of email security and best practices. Experience working with Secure Email Gateways (SEGs), Mail Transfer Agents (MTAs), and end user training solutions like Knowbe4 is highly desirable.

Experience with both traditional DLP and Cloud Access Security Broker (CASB) solutions, especially developing data classification policies, signature detection, and response runbooks.

Thorough knowledge of Public Key Infrastructure (PKI), certificate lifecycle management, 802.1x implementation, mTLS, etc.

Experience with Google Workspace, especially developing Trust Rules to secure and control sensitive data and enhancing DLP capabilities.

Experience with developing information security architectures and securing complex infrastructure environments.

Work with Stack's highly technical software and hardware engineering teams to understand their goals, and deploy tools and solutions to get the data accessible to them for development.

We are proud to be an equal opportunity workplace. We believe that diverse teams produce the best ideas and outcomes. We are committed to building a culture of inclusion, entreprene

Senior Cyber Security Engineer

About the role

Responsibilities

Requirements

Benefits

Additional Information

Your Match

Company Intel

What employees say

Interested in this role?