Purpose and Job Summary
ORIX USA is seeking a Senior Cyber Security Engineer to join our growing cyber team. The ideal candidate will have a broad expertise in security standards, practices, tools and technologies. They will work closely with other technical, incident management, legal, compliance, business, and cyber personnel to protect the organization by employing a range of technologies and processes to prevent, detect and manage cyber threats. The Senior Cyber Security Engineer will identify, monitor, assess, and remediate any threat posed by cyber actors. They will provide strategic assessment, tactical analysis and recommendations for cyber risk reduction operations.
Essential Duties & Responsibilities
Education, Skills, & Experience
ORIX USA is an equal opportunity employer, providing equal employment opportunities (EEO), and is committed to diversifying its workforce. All employees and applicants for employment will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, sexual orientation, gender identity or expression, pregnancy, protected veteran status or other status protected by law. This policy applies to all terms and conditions of employment.
ORIX USA is seeking a Senior Cyber Security Engineer to join our growing cyber team. The ideal candidate will have a broad expertise in security standards, practices, tools and technologies. They will work closely with other technical, incident management, legal, compliance, business, and cyber personnel to protect the organization by employing a range of technologies and processes to prevent, detect and manage cyber threats. The Senior Cyber Security Engineer will identify, monitor, assess, and remediate any threat posed by cyber actors. They will provide strategic assessment, tactical analysis and recommendations for cyber risk reduction operations.
Essential Duties & Responsibilities
- Implement Cyber Security processes and procedures to ensure Cyber Security threats are mitigated
- Participate as a core member of the incident response team
- Appropriately inform and advise management on incidents and incident prevention
- Develop policies and/or advocates for changes in policy that support organizational cyberspace initiatives or required changes/enhancements
- Document processes related to Cyber Security
- Perform cyber risk assessments to identify risk, recommend and implement risk reduction measures
- Provide leadership, training, and mentoring to junior team members
- Work collaboratively with cyber, technical teams, and business functions
- Lead implementation efforts for various security technology improvements and initiatives
- Develop a deep understanding of the intent, objectives, and activity of cyber threat actors through threat hunting and threat modeling
- Static and dynamic threat analysis
- Applies knowledge of data, information, processes, organizational interactions, skills, and analytical expertise, as well as systems, networks, and information exchange capabilities to manage acquisition programs.
- Executes duties governing hardware, software, and information system acquisition programs and other program management policies
Education, Skills, & Experience
- Bachelor of Science in Computer Science, System/Computer Engineering, Cyber Security, or Information Security is preferred. Five (5) years of cyber work experience may be substituted in lieu of a Bachelor's Degree.
- Passionate about Cyber Security
- Excellent organizational, communication, and interpersonal skills
- Customer service and quality focused with proven process improvement skills
- Strong understanding of cyber threat landscape, vulnerability management, and NIST CSF
- Innovative problem solving, research, and analytical skills
- Ability to multi-task and prioritize work effectively
- Strong understanding of data security, data classification, and data loss prevention
- Highly motivated self-starter
- Strong sense of ownership and driven to manage tasks to completion
- Related certifications: Security+, CEH, CISM, or CISSP a plus
ORIX USA is an equal opportunity employer, providing equal employment opportunities (EEO), and is committed to diversifying its workforce. All employees and applicants for employment will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, sexual orientation, gender identity or expression, pregnancy, protected veteran status or other status protected by law. This policy applies to all terms and conditions of employment.