Sr Cybersecurity Engineer — Abbott-Unlimited LLC, Kansas City Metropolitan Area

Senior Cybersecurity Engineer (Topeka, KS or Kansas City, MO)

Summary of Primary Duties and Responsibilities:

This position provides support to ensure compliance with clients standards and Corporate Information Security Policies. The position will encompass the task of overseeing and managing networking systems, while also ensuring the efficacy of firewall-based security measures. It's imperative to accurate documentation concerning vital cyber assets for safeguarding purposes. The individual will operate in a collaborative, cross-functional manner, working closely with vendors, engineers, operators, technicians, and IT personnel.

Duties and Responsibilities:

• Implement, administer, and optimize cybersecurity controls including SIEM, EDR/XDR, email security, network detection and response (NDR), cloud security, identity security, and security automation platforms.

• Research, implement, and maintain cybersecurity technologies and best practices across on-premises, cloud, and hybrid environments.

• Provide recommendations that enhance the organization's cybersecurity strategy, risk posture, resiliency, and adoption of emerging technologies.

• Monitor, investigate, and respond to cybersecurity events, alerts, and incidents using SIEM, EDR, NDR, SOAR, cloud, and identity security monitoring platforms.

• Participate in incident response, threat hunting, playbook development, threat mitigation, and recovery activities to reduce organizational cyber risk.

• Perform cybersecurity risk assessments and provide recommendations to mitigate identified threats and vulnerabilities while aligning with organizational risk tolerance.

• Protect enterprise information, operational technology (OT), cloud resources, and critical infrastructure assets through implementation of security controls and monitoring processes.

• Support cybersecurity governance, regulatory compliance, and audit activities, including NERC CIP, NIST, CIS Controls, and other applicable regulatory frameworks.

• Lead or support cybersecurity risk assessments, vulnerability assessments, and remediation efforts across technology environments.

• Mentor junior analysts and provide technical guidance during security investigations and projects.

• Provide operational support for cybersecurity technologies and participate in incident response and on-call activities as required

Participate in an on-call rotation supporting cybersecurity operations, incidents, and critical security technologies.

Education and Experience Requirements:

• A bachelor’s degree is typically required in Information Systems, Computer Science or related field. Relevant cybersecurity certifications such as CISSP, GIAC, Security+, CySA+, CCSP, or equivalent industry-recognized certifications are preferred.

• Successful candidates typically possess seven or more years of progressively responsible experience in cybersecurity, information security, risk management, incident response, security operations, compliance, or related technology disciplines.

• Demonstrated technical aptitude and the ability to evaluate, learn, and apply emerging technologies, security concepts, and industry best practices are required. Must be capable of independently analyzing security threats, vulnerabilities, risks, and operational issues and providing effective recommendations for remediation and risk reduction.

• Strong oral and written communication skills are required, including the ability to communicate technical concepts, risks, and recommendations to technical, operational, and executive audiences.

Skills, Knowledge, and Abilities Required:

• Ability to communicate effectively with technical and non-technical stakeholders across the organization and with external partners, vendors, auditors, and regulatory entities.

• Working knowledge of security operations, incident response, threat detection, vulnerability management, security monitoring, threat intelligence, security automation, and risk management practices.

• Knowledge of enterprise operating systems, endpoint management, and system security principles, with the ability to quickly learn and support new technologies and platforms.

• Understanding of networking concepts, protocols, traffic analysis, and network security principles required.

• Knowledge of endpoint security technologies, malware prevention, endpoint detection and response, and host-based security controls.

• Understanding and good working knowledge of major firewall vendors

• Ability to independently analyze security events, identify risks, develop recommendations, and communicate findings to appropriate stakeholders.

• Effective oral and written communication skills are necessary, especially the ability to present technical information to an audience with a broad range of information technology experience.

Licenses, Certifications, Bonding, and/or Testing Required: None

Working Conditions: Mix of at home and office environment.

No C2C available