Cybersecurity Engineer

ComTec Solutions is hiring a Cybersecurity Engineer in Rochester, NY (onsite) to support security direction, security reviews, and CMMC Compliance across client projects.

Responsibilities

• Engage in project work during initiation, requirements, and design to ensure security is considered and incorporated at the right level based on risk
• Conduct security reviews and help design complex applications and technologies
• Evaluate and maintain security system plans and procedures to safeguard internal information systems
• Research, recommend, and implement process and system changes that strengthen security and align to corporate policies
• Identify, address, and resolve key risks and issues in a way that satisfies business needs
• Perform security risk assessments to determine the level of security services to include
• Document customer systems
• Serve as a liaison between ComTec and cybersecurity vendors
• Complete weekly review and analysis of cybersecurity reports
• Monitor assigned tickets and tasks; provide service or escalate as needed
• Develop tasks and milestones for security projects
• Translate business and non-functional requirements into security controls to support security architecture and document the security solution for communication and publication
• Use analytical skills to identify problems, collect or interpret data, establish facts, anticipate obstacles, and create plans to resolve issues
• Apply knowledge of current vulnerabilities plus response and mitigation strategies used in cybersecurity
• Design and incorporate technical security controls aligned with NIST 800-171 and/or CMMC
• Challenge business and IT colleagues when needed to support company interests
• Demonstrate customer focus by evaluating decisions from the customer perspective and building customer relationships
• Maintain accurate ticket information, including notes and resolution
• Adhere to departmental policies for reporting, request handling, and change controls
• Maintain daily timesheet and expense report entries and submit them accurately and on time
• Other duties as required

Requirements

• Strong background in security architecture, including deep knowledge of IT network security (secure LAN, WAN, vLAN, MPLS, and secure network zoning/restricted network design) and cloud-based technologies
• Strong background in network engineering, including Windows Server architecture, Windows virtualization, networking, backup solutions, and disaster recovery
• Strong background in Microsoft security architecture with deep knowledge of server and workstation security
• Ability to troubleshoot server-based software issues involving:
  • Microsoft Windows Server operating systems
  • On Premise Microsoft Exchange and hosted Microsoft Office 365
  • Microsoft Remote Desktop Services
  • Microsoft Hyper-V and VMWare
  • Enterprise EDR and MDR solutions
  • Enterprise class backup solutions
• Knowledge of server/workstation peripherals including NAS/SAN solutions
• In-depth troubleshooting of workstation/server hardware and software
• Strong understanding of networking equipment (switches, firewalls, wireless access points)
• Strong written and verbal communication skills
• Pleasant, professional demeanor in client and internal communications
• Ability to multitask; strong organization skills
• Ability to operate independently on daily tasks without direct supervision
• Work effectively with clients at all levels, from executive to IT to end user
• Experience: (5) years in Information Technology
• Experience: (2) years in Cybersecurity
• Experience: (1) year in CMMC compliance
• Information Security qualifications such as CISSP, CISM, CISA, and ISSAP (plus)
• Certified CMMC Professional (CCP)
• Familiarity with NIST SP 800-171 and/or 800-53
• Vulnerability Management
• Ability to occasionally schedule evening or weekend work
• Valid driver’s license and reliable personal vehicle
• Ability to use computer and office equipment
• Ability to remain calm in stressful situations
• Performs all administrative functions expected at this level

Technologies

• secure LAN, secure WAN, vLAN, MPLS
• NIST 800-171, NIST SP 800-53
• CMMC
• Microsoft Windows Server, Windows Virtualization
• On Premise Microsoft Exchange, Microsoft Office 365
• Microsoft Remote Desktop Services
• Microsoft Hyper-V, VMWare
• Enterprise EDR and MDR solutions
• Enterprise class backup solutions
• NAS/SAN solutions
• Switches, Firewalls, Wireless Access Points
• Disaster Recovery

Work Details

• Location: Rochester, NY (onsite)
• Salary: USD 110,000 - 113,000 per yearly
• Minimum experience: 5 years
• Travel: Minimal
• Billable hours: 80% of worked hours