Senior Cybersecurity Engineer

Job Summary:

System One is seeking a Sr. Cybersecurity Engineer for a long-term opportunity in Melbourne, FL.

Responsibilities:

• Security Monitoring & Incident Response: Monitor security systems (SIEM/Endpoint Protection (AV, EDR, Zero Day, APT), DLP, IPS/IDS, NAC and rogue device detection) for suspicious activities and anomalies. Respond to security incidents, conducting root cause analysis and coordinating remediation efforts.
• Threat Detection & Mitigation: Identify, analyze, and respond to security threats and vulnerabilities. Perform threat hunting and advanced detection activities to protect systems and data.
• Patch Management: Lead the planning, testing, and scheduling of system patches across all endpoints, mobile devices, servers, and network infrastructure. Develop and maintain a patch management schedule and ensure timely application of security patches and updates.
• Coordinate with various teams to minimize disruption and ensure compatibility of patches with organizational systems.
• Vulnerability Management: Conduct vulnerability assessments and penetration testing. Identify and prioritize risks, working with IT teams to remediate vulnerabilities and implement patches.
• Security Architecture & Enhancements: Design, implement, and manage security solutions, including firewalls, encryption protocols, access control systems, and data protection technologies.
• Ensure compliance with regulations such as NCUA, PCI-DSS, and other applicable industry standards. Assist in audits, both internal and external, and provide reports and documentation as required.
• Develop, document, and maintain security policies, standards, and procedures. Contribute to the continuous improvement of the organization’s cybersecurity posture.
• Work closely with network, systems, and application teams to ensure security is integrated into the infrastructure. Support secure system and application development practices.
• Assist in delivering cybersecurity training programs to staff, promoting awareness of security policies, phishing attacks, and safe computing practices.
• Lead complex incident response efforts, coordinating with internal teams and external partners. Serve as the primary point of contact during high-impact security incidents.
• Mentor and guide junior engineers (Level I and II), providing technical support and professional development opportunities

Qualifications:

• Familiarity with security tools such as SIEM, IDS/IPS, endpoint protection, firewalls, and encryption.
• Understanding of NCUA and PCI-DSS regulations.
• Ability to assess vulnerabilities and threats and implement risk mitigation strategies.
• 8-10 years of experience in cybersecurity required, preferably in the financial sector.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field is required. Relevant certifications and experience may substitute for a degree

Certifications (Preferred):

• CompTIA Security+, Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), GIAC certifications (GSEC, GCIH), Certified Information Systems Auditor (CISA), or equivalent certifications.