Cybersecurity Engineer I

Educational Media Foundation • Franklin, TN

55d • Onsite

About The Position

Are you ready to be on the front lines of digital defense? As a Cybersecurity Engineer I, you’ll join a dynamic team dedicated to safeguarding our organization’s data and systems. From tackling vulnerabilities and risk mitigation to responding swiftly to SOC alerts, you’ll play a pivotal role in keeping threats at bay and ensuring our security posture remains strong. If you thrive in a fast-paced environment and have a passion for protecting what matters most, this is your opportunity to make a real impact This role will work fully on-site in Franklin, TN.

Requirements

• Bachelor’s Degree in Computer Sciences, Information Systems, or equivalent experience.
• 1-2 year of cybersecurity systems experience.
• Solid ability to manage and report on multiple projects / system deployments concurrently, prioritizing efforts, managing time effectively, and requiring minimal supervision in the execution.
• Good understanding or ability to rapidly learn the technology and social gaming industry and desire for expanding skills through continued education.
• Demonstrate problem solving, analytical and investigative skills combined with the ability to develop creative solutions and navigate through ambiguity in a dynamic, agile environment.
• Familiarity with leading industry vulnerability and software (preferably Qualys) and standard disaster recovery policies and procedures.
• Familiarity with cybersecurity standards such as NIST CSF, ISO, CFC and CIS.
• Familiarity with infrastructure architecture, virtualization, and cloud technology.
• Familiarity with Microsoft Server, Linux, Apple, and Active Directory/Entra architecture.

Nice To Haves

• Security Plus certification will be given preference.

Responsibilities

• Planning, implementing, monitoring, and upgrading security controls for the protection of the organizations data, systems and networks.
• Monitor vulnerabilities and remediate issues for all devices and systems on the K-LOVE network.
• Responsible for preparing and documenting standard operating procedures and protocols.
• Support patch management implementation and process.
• Submit patch and vulnerability scan reports as defined by reporting manager.
• Help develop effective strategies for digital threat remediation and technology to orchestrate and automate responses.
• Provide detailed technical analysis of vulnerabilities identified (through scan results, research, vendor assessments, or static-code analysis) to determine impact.
• Establish and maintain documents of security incidents, process and procedures.
• Accumulate operational threat intelligence and maintain threat profiles of likely attackers.
• Perform security risk assessments, develop and maintain vendor scorecard.
• Assist Governance Risk and Compliance (GRC) Manager with ongoing business continuity management initiatives and disaster recovery.
• Work with GRC team on Payment Card Industry (PCI) compliance requirements, and initiatives to ensure operational effectiveness with applicable laws and regulations, as well as internal policies and procedures.
• Coordinate PCI audit-related tasks to ensure the readiness of managers and their teams for audit testing and facilitate the timely resolution of any audit findings.
• Monitor and maintain current knowledge of technologies and methodologies current to industry security trends and advances; and present recommendations as necessary through continued education and certifications.
• Conduct investigative analysis on investigations related to Human Resources, Incident Response, Special Investigations, and others as needed.
• Respond to incidents SOC alerts via security controls such as; web application firewall (WAF), file integrity monitoring (FIM), intrusion detection systems/ intrusion prevention systems (IDS/IPS), security information and event management (SIEM), endpoint detection and response (EDR), data loss prevention (DLP) and provide digital forensics (DF) as needed to incidents.
• Remediate ServiceNow incident tickets and participate in the change management process.
• Provide executive and operational reports on Vulnerability Management, Incident Response, etc.
• Ensure that the Ministry’s sensitive information and IT equipment are kept safe and confidential by implementing the correct security measures.
• Assist Senior Engineers in developing policies, procedures, playbooks, and standards that exceed existing and newly developed policy and regulatory requirements.
• Develop technical solutions and help implement security controls to help mitigate security vulnerabilities and automate repeatable tasks.
• Support Security Awareness training programs and assist in phishing test platform.
• Administer and support enterprise security controls.
• Daily administrative tasks, reporting and communication with the relevant departments in the organization.
• Partner with Team Members and other departments to troubleshoot and resolve issues.
• Maintain an inventory of all security applications and hardware in an organized manner
• Ensure all existing policies and procedures are stored in an organized and accessible fashion.

Benefits

• Industry leading Medical, Dental & Vision coverage
• Short/long term disability and life insurance
• Robust 401K with company match
• Parental leave with Baby Bonding pay
• Generous PTO, holiday and sick pay
• Unique company culture that includes exclusive access to concerts, movie premieres, media industry events, and more
• Leadership and Career Development Programs including free access to LinkedIn Learning platform

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Number of Employees: 251-500 employees