Principal Security Engineer
Applications have closed
This listing has expired.
One of the leading Blockchain organization in New York is currently expanding its team and looking for a Principal Security Engineer (Offensive & Defensive). The ideal candidate will have strong experience in red team exercises such as Penetration testing and has history with incident response.
Areas of Strength: Tool deployment, Scripting, Incident Response, Penetration Testing & Red Team
Key responsibilities:
- Engineer / administer security infrastructure to optimize efficiency / expand capabilities
- You are a specialist that knows how to exploit discovered flaws/ remediate
- Develop / implement automated systems (python/bash)
- Work in a collaboration with the team, but also independently, providing hands-on support to clients, maintaining communication, and updating senior staff on progress.
- Red Team: Penetration Testing, Attack Simulation exercises,
- Incident Response: Continuous assessment around the effectiveness of defense response.
Areas of experience:
- Lifecycle and models including Cyber Kill Chain and MITRE ATT&CK framework.
- Unix / Linux environments, with knowledge of commands & shell.
- Scripting / development capability a must (python/bash)
- Working knowledge of JIRA/Confluence
- Experience of cyber threats in the cryptocurrency/ DeFi / Blockchain
- Experience with SIEM technologies, threat hunting, monitoring and investigations.
To be successful in this role you will have:
- 7 years of relevant experience in Cyber Security as a hands-on Security Engineer (Red&Blue)
- Bachelor / Masters of Engineering in Computer Science / Information Security / Cyber Security
- Expertise: python, bash, C, C++, cryptography, reverse engineering, wireless networks, common web vulnerabilities (SQLi, XSS, CSRF), exploit development.
- Strong experience with security applications utilized for logging, packet capture, email, directory services, web, authentication, remote access, and encryption.
- Network and security and tools, including IDS/IPS, NAC,DLP, VPN, firewall management and audit, endpoint, anti-malware, database audit and monitoring
- Solid experience with secure architecture design.
- Cloud security deployment and controls.
Language: English
The candidate must be US citizens, or Green cardholders
You will be part of a very diverse team that is highly collaborative, with the ability to build relationships with colleagues from different cultures throughout the organization.
Diversity & Inclusion, LGBTQ+
