• Assists in digital evidence collection and forensic analysis to support incident response.
• Contributes to the continuous improvement of cybersecurity operations through participation in incident response playbook enhancements, post-incident reviews to distill lessons learned, and maintenance of regular security assessments and updates.
• Identifies automation opportunities to enhance cybersecurity capabilities and proactively addresses trends that may negatively impact stakeholders.
• Conducts investigations into security incidents such as malware infections, phishing attempts, and unauthorized access; Monitors the threat landscape to identify and assess emerging threats and vulnerabilities.
• Analyzes attack vectors and understands threat actor techniques to compromise systems and data.
• Develops knowledge in using SIEM tools, with potential for further development and maintenance of detections.
• Understands threats and risks related to the transportation and logistics industry.
• Engages in training and exercises to maintain team proficiency.
• Supports network investigations to mitigate potential security risks and intrusions.
• Fosters partnerships and collaborates with internal and external teams to enhance cybersecurity measures.
• Strengthens application security by implementing best practices in software development and deployment.
• Ensures robust cloud security protocols are in place to protect organizational data across various platforms.
• Enhances mobile security to safeguard against unauthorized access and threats on mobile devices.
• Advises on comprehensive data security strategies to ensure the integrity and confidentiality of sensitive information.
• Participates in the assessment of third-party vendors and service providers to ensure compliance with security standards.
• Coordinates, schedules, and manages penetration testing, vulnerability assessments, phishing simulations, and social engineering tests to identify potential security weaknesses.
• Regular attendance is required.
• This is not an all-inclusive list of job requirements and/or duties and may not contain all mental and physical capabilities necessary to perform the job at all times due to circumstances. Operational, safety and other needs may require the employee to perform any and all other duties as assigned. Employees are expected, and must be able to perform all such duties and tasks.

Required Qualifications:

• Basic knowledge of SIEM tools and the cybersecurity threat landscape.
• Understanding of ICS and OT security principles and cloud security best practices.
• Ability to work effectively with cross-functional teams and customers.
• Good planning and organizational skills, with the ability to manage multiple priorities.
• Understanding of the MITRE ATT&CK Framework and ability to apply it in practical scenarios.
• Strong communication skills, both written and verbal, and the ability to collaborate cross-functionally.
• Resourceful and self-motivated, with the ability to work independently when necessary.
• Analytical and critical thinking skills, with a demonstrated commitment to customer service.
• Familiarity with digital forensics, incident response, and playbook development.

​

Preferred Qualifications:

• Bachelor’s degree in computer science, information technology, cybersecurity, or a related field.
• 1 year of experience in cybersecurity or related IT roles.
• Basic knowledge of application, cloud, mobile, and data security practices.
• Experience in conducting security assessments of third-party vendors and service providers.
• Proficiency in coordinating and managing security testing activities, including penetration testing and vulnerability scanning.
• Demonstrated ability to develop and execute security testing schedules and maintain up-to-date security measures.

Physical Demands:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to talk or hear. Specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception and ability to adjust focus. The employee is frequently required to sit and use hands to finger, handle, or feel or operate computers and other standard office equipment. The employee is occasionally required to stand, walk, lift, twist, turn and reach with hands and arms. The employee must be capable of lifting a minimum of 20 lbs., or more if required by the essential functions of the job.

​

Work Environment:

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. The noise level in the work environment ranges from quiet to loud as required by the essential functions of the job.