Cybersecurity Engineer, Senior (NJUS)

Netjets - Columbus, OH

Full-time - Senior

Columbus, OH

Support Activities for Transportation

About the position

The Cybersecurity Engineer, Senior will be an integral part of the NetJets Cybersecurity Services team, providing leadership in various critical areas including Vulnerability Management, Endpoint Detection & Response, Email Security, and Data Analysis of security monitoring outputs. This role involves coordinating Remediation Patching, analyzing the threat landscape, and advising diverse teams on cyber risk and mitigation measures. The position is essential for daily Security and Compliance efforts, ensuring that the organization maintains a robust cybersecurity posture. In collaboration with Security Incident Responders, Cyber Threat Intelligence Analysts, and Cybersecurity Architects, the Cybersecurity Engineer, Senior will work to enhance the overall security framework of the firm. Responsibilities include testing, monitoring, and maintaining information systems and cybersecurity policies, procedures, and systems, which encompass access management for hardware, firmware, and software. The engineer will be tasked with identifying and mitigating security risks and exposures by leading investigations into security violations, suggesting procedures to prevent future incidents, and improving overall security measures. The role requires proactive identification of security deficiencies and opportunities for improvement, enabling secure global business operations through continuous evaluation and hardening of existing Cybersecurity Infrastructure platforms. The engineer will also collaborate with business stakeholders to provide tailored security solutions, develop prioritized remediations for security gaps, and mentor team members. Staying updated on the latest security trends, vulnerabilities, and privacy legislation is crucial, as is assisting in documenting policies and recommending changes in security practices based on legal updates. The engineer will also support incident response efforts and provide consultative security expertise to various business units and Corporate IT teams as needed.

Responsibilities

• Assists the team in proactively identifying security deficiencies or opportunities for improvement.
• Performs duties necessary to establish practices and system configurations to ensure the safety of information systems assets.
• Collaborates with business stakeholders to provide security solutions that support their requirements.
• Develops tactical and strategically prioritized remediations to address security gaps.
• Mentors and develops team members.
• Stays up to date on the latest security trends, vulnerabilities, and privacy legislation.
• Assists in documenting policies, procedures, and standards based on guidance from Corporate Security Management.
• Recommends changes in security policies and practices in accordance with changes in law.
• Researches mechanisms and tools for control compliance.
• Assists in periodic audits of business entities to ensure continued compliance.
• Provides Incident Response support for the enterprise and business units as needed.
• Provides consultative security expertise to business units and Corporate IT teams in support of projects.
• Monitors and researches real-time alerts continuously.
• Tracks and reports policy violations.

Requirements

• Bachelor's in Information Technology or Computer Science.
• 6-8 years of experience in an Information Technology security role.
• 4-6+ years' experience with various standards (PCI/DSS, SOX, FedRAMP, HIPAA, etc.).
• Gaining understanding of network and security technologies (NextGen firewalls, vulnerability management, endpoint security, DLP, etc.).
• Outstanding organizational, interpersonal, and communication skills (written and verbal).
• Ability to manage changing workloads while maintaining a sense of priorities and delivering quality service within required timeframes.
• Ability to learn new technologies and applications and apply that knowledge to daily workflows.
• Attention to detail, organized, and able to work and research independently.
• Team-oriented, works well with Senior level team members and managers.
• Demonstrated adaptability, analytical and problem-solving ability, and attention to detail.
• Solid understanding of web application security/OWASP Top10.

Nice-to-haves

• Certifications preferred: CISA, CISSP, CEH, GSEC, Security+.