Proficio

Proficio is an award-winning managed detection and response (MDR) services provider. We provide 24/7 security monitoring, investigation, alerting and response services to organizations in healthcare, financial services, manufacturing, retail and other industries. Proficio has been highlighted in Gartner’s Market Guide for Managed Detection and Response Services for the last three consecutive years. We have a track record of innovation. Proficio invented the concept of SOC-as-a-Service. We were the first MSSP to provide automated response services and the first in our space to provide a risk scoring dashboard. Our typical client is a medium to large-sized organization that lacks the in-house resources to address the challenges of a rapidly changing threat landscape. The difficulty of hiring and retaining cybersecurity professionals are widely understood but our prospective clients also struggle to effectively harness technology and build hardened processes. While Proficio has developed a unified service delivery platform designed to meet the needs of the most demanding clients, what sets us apart is the quality and passion of our people. We believe the SOC of the Future will meld the creativity of human intelligence with the power of advanced technologies like AI. SUMMARY Proficio is seeking a Vulnerability Intelligence Engineer to join our Risk-Based Vulnerability Management (RBVM) Services team. The Vulnerability Intelligence Engineer will be heavily focused on consultative security related services and performing vulnerability management functions for our RBVM service clients. The Engineer will be an active participant in our customer offering and will build vulnerability management solutions, perform vulnerability assessments, and provide vulnerability intelligence to prioritize vulnerabilities that focus client remediation efforts. A successful candidate should have a fundamental understanding of vulnerability management processes and how threat intelligence and attack surface modeling can inform the likelihood of exploit of a vulnerability. The candidate will play a key role in engineering and applying new vulnerability intelligence metrics to the vulnerability assessment and prioritization processes in the Proficio RBVM lifecycle. The ideal candidate will be someone with vulnerability management experience using the Qualys cloud platform tools; working knowledge of Amazon Web Services, Azure, Google Cloud Platform, containers, orchestration tools, and Splunk; and a good understanding of Windows, Linux, macOS, TCP/IP, Network Security and Python. Responsibilities <ul> <li>Build vulnerability management solutions for our clients. </li> <li>Produce RBVM service deliverables for our clients. These deliverables include scans, analysis, prioritizations, remediation recommendations, and reports.</li> <li>Development, maintenance, and continual improvement of the vulnerability management platform, processes, and technical assessment support</li> <li>Contribute to vulnerability management strategy and automation</li> <li>Document vulnerability management policies, procedures, and processes.</li> <li>Collaborate with client engineering teams to understand their vulnerability management needs and collectively develop remediation and mitigation strategies</li> <li>Contribute to vulnerability intelligence criteria, methods, and processes</li> <li>Script in languages such as Python, Java, Shell Script to build workflows and automation of scan data</li> <li>Maintain knowledge and skillset relevant to trends in the industry</li> <li>Additional duties may be assigned</li> <li>Ensure security, availability, and confidentiality of all sensitive data collected, processed, or stored by this position</li> </ul>RequirementsRequired <ul> <li>1-2 years of combined experience in vulnerability management or a multi-discipline security engineer role</li> <li>1 year experience with Qualys cloud modules (VM, WAS, CS, PCI, PC, etc.) and deploying Qualys agents, sensors, and virtual scanning appliances</li> <li>1 year experience running vulnerability management assessments, prioritizing vulnerabilities, and creating remediation plans for an enterprise level company</li> <li>Knowledge of vulnerability management processes for infrastructure, cloud-native, and remote endpoints</li> <li>Knowledge of CVSS, CVE, NVD, ExploitDB and other vulnerability management resources</li> <li>Strong communication skills including ability to relate technical concepts as this is a customer facing consultative/technical role</li> <li>Continuous learner who has a passion for cybersecurity</li> <li>Superior problem-solving abilities</li> <li>Experience working for an MSSP/MDR highly desired with experience working for an enterprise level firm required if no MSSP/MDR experience </li> <li>Experience in a customer facing role with strong communication skills including ability to relate technical concepts to support both phone and face to face interactions</li> </ul> Preferred <ul> <li>Experience across multiple vulnerability management tools such as Qualys, Tenable.io (Nessus), Rapid7, Kenna, RiskIQ, RiskSense, Balbix, etc.</li> <li>Experience working with SIEM technologies receiving and triaging alerts from various log sources preferred</li> <li>Strong base in Linux operating systems, scripting skills (preferably in Python), and experience with a variety of other security tools, Amazon Web Services, Azure, Google Cloud Platform, containers, orchestration tools, and Splunk</li> </ul> LOCATION &amp; TRAVEL <ul> <li>Position is a remote US role or can sit in our San Diego SOC.</li> <li>Position is &lt;10% travel to start, but may require more in the future</li> <li>Position will service customers throughout the US with potential work for customers around our other global SOCs located in Barcelona and Singapore</li> </ul>Benefits<ul><li>Opportunity to work in a progressive organization with structured training and roadmap for success</li></ul><ul><li>ProLunch, Game Room, onsite Gym, and fun employee activities!</li></ul><ul> <li>Health, Dental and Vision plans available first of the month and other benefits available from day 1</li> <li>401K plan</li> <li>Gym reimbursement</li> <li>Employee Assistance Program</li> <li>Life and Voluntary Life Insurance programs</li> </ul>Proficio is an EOE employer.

Carlsbad

Vulnerability Intelligence Engineer

Proficio is an award-winning managed detection and response (MDR) services provider. We provide 24/7 security monitoring, investigation, alerting and response services to organizations in healthcare, financial services, manufacturing, retail and other industries. Proficio has been highlighted in Gartner’s Market Guide for Managed Detection and Response Services for the last three consecutive years. We have a track record of innovation. Proficio invented the concept of SOC-as-a-Service. We were the first MSSP to provide automated response services and the first in our space to provide a risk scoring dashboard. Our typical client is a medium to large-sized organization that lacks the in-house resources to address the challenges of a rapidly changing threat landscape. The difficulty of hiring and retaining cybersecurity professionals are widely understood but our prospective clients also struggle to effectively harness technology and build hardened processes. While Proficio has developed a unified service delivery platform designed to meet the needs of the most demanding clients, what sets us apart is the quality and passion of our people. We believe the SOC of the Future will meld the creativity of human intelligence with the power of advanced technologies like AI.JOB DESCRIPTION Proficio is looking for a self-starter to join the growing network infrastructure team at Proficio. With the rapid growth, Proficio is currently in the process of building out new data centers, upgrading existing systems, and architecting the infrastructure for future growth, reliability of service, improved functionality, and ease of maintenance. The Security Infrastructure Engineer I, will assume responsibility for supporting our Security Infrastructure department and our Proficio staff. Work will encompass the maintenance, documentation, troubleshooting, and instruction of Proficio’s IT network infrastructure, including desktop support for our US employees. Related duties include configuration and administration of associated hardware and software, applying appropriate security measures, creating and removing the proper remote user accounts and groups, and publishing applications.Requirements<ul> <li>2+ years’ experience in IT Infrastructure Desktop Support; specifically experience in a mixed Windows / Mac environment, desktop support, system administration, and migrations.</li> <li>Experience with Active Directory, Windows and Mac operating systems is required.</li> <li>Strong knowledge in onboarding and termination of employees including all related account set ups, permissions, security protocols, and hardware provisioning.</li> <li>Must be a self-starter and excel in problem solving skills, communication skills, and organizational skills.</li> <li> Versatile team player who can be assigned to infrastructure projects as we migrate to new products, expand our data</li> </ul>Location and Travel: <ul> <li>This position is located in our Carlsbad, California corporate office. Work will include on-call rotations to support our global operations (California, Singapore, and Spain)</li> </ul>Benefits<ul> <li>Health, Dental and Vision plans available first of the month and other benefits available from day 1</li> <li>ProLunch, Game Room and fun employee activities!</li> <li>401K plan</li> <li>Gym reimbursement</li> <li>Employee Assistance Program</li> <li>Life and Voluntary Life Insurance programs</li> </ul>Proficio is an EOE Employer

Security Infrastructure Engineer

Proficio is an award-winning managed detection and response (MDR) services provider. We provide 24/7 security monitoring, investigation, alerting and response services to organizations in healthcare, financial services, manufacturing, retail and other industries. Proficio has been highlighted in Gartner’s Market Guide for Managed Detection and Response Services for the last three consecutive years. We have a track record of innovation. Proficio invented the concept of SOC-as-a-Service. We were the first MSSP to provide automated response services and the first in our space to provide a risk scoring dashboard. Our typical client is a medium to large-sized organization that lacks the in-house resources to address the challenges of a rapidly changing threat landscape. The difficulty of hiring and retaining cybersecurity professionals are widely understood but our prospective clients also struggle to effectively harness technology and build hardened processes. While Proficio has developed a unified service delivery platform designed to meet the needs of the most demanding clients, what sets us apart is the quality and passion of our people. We believe the SOC of the Future will meld the creativity of human intelligence with the power of advanced technologies like AI. Summary:The Threat Analysts are the core of our SOC-as-a-Service operations. They are on the front line receiving and triaging alerts from our SIEM platform. The operate across multiple customers and time zones while utilizing multiple consoles and technologies. Our Threat Analysts have strong network and security knowledge, are strong problem solvers, and work under time pressure to quickly analyze and report security threats in our customers’ networks.Professionals at the Threat Analyst level possess 2-4+ years’ experience and have mastered both the core skills (threat monitoring and threat analysis)Core Skills: <ul> <li>Threat Monitoring – actively monitoring our SIEM for alerts, then identify the root cause of the alert and provide suggested fixes </li> <li>Threat Analysis: Utilize knowledge of internal and external information vulnerabilities and match those to real-world cyber attacks</li> </ul> Advanced Skills: <ul> <li>Incident Response: address and manage the aftermath of a security breach or cyberattack with a focus on limiting damage, reducing recovery time/costs, and returning systems to normal. </li> <li>Threat Intelligence: creation of the information our organization uses to understand the threats that have, will, or are currently targeting our customers. This information is then used to prepare, prevent, and identify cyber threats.</li> <li>DevOps: integrating security practices to bridge traditional gaps between IT and security while ensuring fast, safe delivery of services</li> </ul>Requirements<ul><li>Education and/or experience equivalent to 5+ years’ in both networking monitoring and cybersecurity</li></ul><ul> <li>2+ years' work with SIEM technologies receiving and triaging alerts from various log sources</li> <li>Continuous learner who has a passion for defensive cybersecurity; ability to utilize resources at your disposal in an efficient manner; advanced problem-solving skills when encountering emerging security attack scenarios</li> <li>Strong base in Linux operating systems, scripting skills (preferably in Python), and experience with a variety of other security tools such as firewalls, IDS/IPS, and vulnerability management</li> <li>Demonstrated communication skills including written documentation of troubleshooting and required responses</li> <li>Proven ability to work in a fast-paced environment with strict SLAs for response time</li> </ul>Benefits<ul><li>Opportunity to work in a progressive organization with structured training and roadmap for success</li></ul><ul> <li>ProLunch, Game Room, onsite Gym, and fun employee activities!</li> <li>Health, Dental and Vision plans available first of the month and other benefits available from day 1</li> <li>401K plan</li> <li>Gym reimbursement</li> <li>Employee Assistance Program</li> <li>Life and Voluntary Life Insurance programs</li> <li>Experience in one of the hottest IT industries today</li> </ul>Proficio is an EOE employer.

Threat Analyst 7am to 4pm PDT Tuesday to Saturday

Proficio is an award-winning <a href="https://www.proficio.com/managed-detection-and-response-service/" rel="noopener noreferrer nofollow ugc" target="_blank">managed detection and response</a> (MDR) services provider. We provide 24/7 security monitoring, investigation, alerting and response services to organizations in healthcare, financial services, manufacturing, retail and other industries. Take a <a href="https://youtu.be/s6zP_TFwTt4" rel="noopener noreferrer nofollow ugc" target="_blank">video tour</a> of our global network of 24/7 Security Operations Centers (SOCs). Proficio has been highlighted in Gartner’s Market Guide for Managed Detection and Response Services for the last five consecutive years. MSSP Alert ranks Proficio among the top 250 global Managed Security Services Providers (MSSPs). We have a track record of innovation. Proficio invented the concept of <a href="https://www.proficio.com/soc-as-a-service/" rel="noopener noreferrer nofollow ugc" target="_blank">SOC-as-a-Service</a>. We were the first MSSP to provide automated response services and are the only company in our space with a patent for cyber risk scoring and security posture gap analysis. Our typical client is a medium to large-sized organization that lacks the in-house resources to address the challenges of a rapidly changing threat landscape. The difficulty of hiring and retaining cybersecurity professionals are widely understood. Our prospective clients are also challenged to effectively harness technology and build hardened processes that reduce the risk of security breaches. While Proficio has developed a unified service delivery platform designed to meet the needs of the most demanding clients, what sets us apart is the quality and passion of our people. We believe the SOC of the Future will meld the creativity of human intelligence with the power of advanced technologies like AI. Proficio’s commitment to developing and promoting our team members is unparalleled in our industry. Most of our senior managers were promoted from within. Job Description This role is a pivotal part of creating a world class Security Operations Center. At Proficio we strive to create a service that can quickly and effectively inform our clients of a threat against their environment. Individuals in this role will be part of a team that creates the content that makes those detections. The successful candidate has experience in security content development. They can analyze log sources from a variety of sources and services to identify the appropriate data models for detecting potential threats. This candidate can quickly and accurately interpret use cases to produce a variety of different detections. They enjoy working alongside their technical and non-technical teammates. This candidate is an effective and proactive communicator, who will concern themselves with implemented the best solution for our customers. Proficio is a team that strives for quality over quantity. Candidates are drawn to complex and ambiguous problems and are skilled at extracting those into simple and actionable solutions for customers. This candidate is a team player who embodies Proficio’s principles and values, with an emphasis on driving results, automation, quality, and consistency. Key Responsibilities <ul> <li>Implement and maintain detection capabilities in Microsoft’s Sentinel SIEM/SOAR including creating, updating, and maintaining the GitHub / Azure DevOps Content Repository</li> <li>Creation of Workbooks, Repositories, Analytics, and Logic Apps (Playbooks)</li> <li>Proven ability to create a custom Analytic for unique customer needs</li> <li>Additional ability to implement and maintain detection capabilities across multiple technologies including but not limited to Splunk, Elastic/Kibana, Logstash, FortiSOAR, ArcSight, Carbon Black, and CrowdStrike</li> <li>Implement reporting that provides a point in time data relevant to compliance and security events</li> <li>Implement dashboards to create data analysis for environmental trends in security and health</li> <li>Designing detection blueprints that will produce high-fidelity alerting for security threats and compliance-based risks</li> <li>Coordinate with internal and external teams to improve the accuracy of detection capabilities and implement best practice mitigations and automated response capabilities</li> <li>Understand and apply information security knowledge to detection capabilities to remove gaps in visibility and monitor for security events, compliance events, and health and maintenance events of interest.</li> <li>Document and communicate detection capabilities and gaps clearly and effectively leveraging multiple industry frameworks including MITRE ATT&amp;CK, the Cyber Kill Chain, and NIST</li> <li>Research and innovate new mitigation, detection, and response capabilities given input from industry trends, customer feedback, and personal research</li> <li>Document processes and create executive level KPI’s for both internal and external use</li> <li>Normalize events to Proficio’s different data models and maintain it alongside best industry practices and standards </li> <li>Working with other less senior members of the team for quality assurance</li> <li>Other duties may be assigned as needed</li> </ul>Requirements<ul> <li>Bachelor's degree in a related field and/or 6+ years demonstrated experience and knowledge</li> <li>2 Years’ experience writing Sentinel Analytics in KQL, creation/maintenance of GitHub / Azure DevOps Content Repository, and creation of Sentinel Playbooks and Automation</li> <li>Understanding of cyber security and IT disciplines including networking, operating systems, authentication protocols, general enterprise network architecture, and security incident response.</li> <li>Understanding of common enterprise technology purposes and logging capabilities including Firewalls, Active Directory, Antivirus/EDR, IDS/IPS, Proxies, and Azure Cloud</li> <li>Additional experience with log aggregation or correlation technologies such as Splunk, Elastic, Carbon Black, or CrowdStrike.</li> <li>Understanding of automation platforms (SOAR tools)</li> <li>Experience working in Linux (Ubuntu, CentOS, or Debian)</li> <li>Additional programming experience (in addition to KQL) in product such as JSON, YAML, ARM, and Python</li> <li>Understanding of security detection frameworks such as MITRE ATT&amp;CK, Cyber Kill Chain, and NIST</li> <li>Regular expression, scripting, and programming experience are not required, but highly desirable</li> <li>Positive and Influential Attitude, Energy, and Effort</li> <li>Adaptability, Accountability, Helpfulness, and Focus</li> <li>Ability to communicate across multiple diverse teams in both focus, skillset, and geo-location</li> <li>Ability to clearly articulate to different stakeholders that work within a technical and non-technical area including Executive level documentation</li> <li>Microsoft SC-900 certification highly desired</li> <li>Certifications such as Security+, CySA+, CCNA, EC-CSOC, SECO-ITSE or BTL </li> <li>Other technology specific certifications such as SC-200, AZ-500, CISSP, or PenTest+ are desirable</li> </ul>Benefits<ul><li>Opportunity to work in a progressive organization with structured training and roadmap for success</li></ul><ul> <li>ProLunch, Game Room, onsite Gym, and fun employee activities!</li> <li>Health, Dental and Vision plans available first of the month and other benefits available from day 1</li> <li>401K plan</li> <li>Gym reimbursement</li> <li>Employee Assistance Program</li> <li>Life and Voluntary Life Insurance programs</li> <li>Experience in one of the hottest IT industries today</li> </ul>Proficio is an EOE employer.

Threat Detection Engineer Senior with Sentinel Focus

Proficio is an award-winning <a href="https://www.proficio.com/managed-detection-and-response-service/" rel="noopener noreferrer nofollow ugc" target="_blank">managed detection and response</a> (MDR) services provider. We provide 24/7 security monitoring, investigation, alerting and response services to organizations in healthcare, financial services, manufacturing, retail and other industries. Take a <a href="https://youtu.be/s6zP_TFwTt4" rel="noopener noreferrer nofollow ugc" target="_blank">video tour</a> of our global network of 24/7 Security Operations Centers (SOCs). Proficio has been highlighted in Gartner’s Market Guide for Managed Detection and Response Services for the last five consecutive years. MSSP Alert ranks Proficio among the top 250 global Managed Security Services Providers (MSSPs).We have a track record of innovation. Proficio invented the concept of <a href="https://www.proficio.com/soc-as-a-service/" rel="noopener noreferrer nofollow ugc" target="_blank">SOC-as-a-Service</a>. We were the first MSSP to provide automated response services and are the only company in our space with a patent for cyber risk scoring and security posture gap analysis.Our typical client is a medium to large-sized organization that lacks the in-house resources to address the challenges of a rapidly changing threat landscape. The difficulty of hiring and retaining cybersecurity professionals are widely understood. Our prospective clients are also challenged to effectively harness technology and build hardened processes that reduce the risk of security breaches.While Proficio has developed a unified service delivery platform designed to meet the needs of the most demanding clients, what sets us apart is the quality and passion of our people. We believe the SOC of the Future will meld the creativity of human intelligence with the power of advanced technologies like AI.Proficio’s commitment to developing and promoting our team members is unparalleled in our industry. Most of our senior managers were promoted from within. Summary: Available: Day and Night shiftThe Threat Analysts are the core of our SOC-as-a-Service operations. They are on the front line receiving and triaging alerts from our SIEM platform. The operate across multiple customers and time zones while utilizing multiple consoles and technologies. Our Threat Analysts have strong network and security knowledge, are strong problem solvers, and work under time pressure to quickly analyze and report security threats in our customers’ networks.Professionals at the Associate Threat Analyst level possess 0-3+ years’ experience and have mastered the core skill of threat monitoring Core Skills: <ul> <li>Threat Monitoring – actively monitoring our SIEM for alerts, then identify the root cause of the alert and provide suggested fixes </li> <li>Threat Analysis: Utilize knowledge of internal and external information vulnerabilities and match those to real-world cyber attacks</li> </ul> Advanced Skills: <ul> <li>Incident Response: address and manage the aftermath of a security breach or cyber attack with a focus on limiting damage, reducing recovery time/costs, and returning systems to normal. </li> <li>Threat Intelligence: creation of the information our organization uses to understand the threats that have, will, or are currently targeting our customers. This information is then used to prepare, prevent, and identify cyber threats.</li> <li>DevOps: integrating security practices to bridge traditional gaps between IT and security while ensuring fast, safe delivery of services</li> </ul>Requirements<ul><li>Education and/or experience equivalent to 0-3+ years’ in both networking monitoring and cybersecurity</li></ul><ul> <li>Work with SIEM technologies receiving and triaging alerts from various log sources preferred</li> <li>Continuous learner who has a passion for defensive cybersecurity; ability to utilize resources at your disposal in an efficient manner; advanced problem-solving skills when encountering emerging security attack scenarios</li> <li>Strong base in Linux operating systems, scripting skills (preferably in Python), and experience with a variety of other security tools such as firewalls, IDS/IPS, and vulnerability management are all pluses</li> <li>Demonstrated communication skills including written documentation of troubleshooting and required responses</li> <li>Proven ability to work in a fast-paced environment with strict SLAs for response time</li> </ul>Benefits<ul><li>Opportunity to work in a progressive organization with structured training and roadmap for success</li></ul><ul> <li>ProLunch, Game Room, onsite Gym, and fun employee activities!</li> <li>Health, Dental and Vision plans available first of the month and other benefits available from day 1</li> <li>401K plan</li> <li>Gym reimbursement</li> <li>Employee Assistance Program</li> <li>Life and Voluntary Life Insurance programs</li> <li>Experience in one of the hottest IT industries today</li> </ul>Proficio is an EOE employer.

Associate Threat Analyst - SIEM monitoring (7am-4pm PDT, Tues-Sat)

Apply to Cyber Security Jobs in Carlsbad in companies remotely and near you. New Cyber Security Jobs in Carlsbad added daily.

Job Position and Company	Location	Tags	Posted
Vulnerability Intelligence Engineer at Proficio	Remote Full Time Windows
Security Infrastructure Engineer at Proficio	Active Directory Monitoring Windows
Threat Analyst 7am to 4pm PDT Tuesday to Saturday at Proficio	Devops IDS Incident Response IPS Linux
Threat Detection Engineer Senior with Sentinel Focus at Proficio	Active Directory Analytics Arcsight Automation Azure
Associate Threat Analyst - SIEM monitoring (7am-4pm PDT, Tues-Sat) at Proficio	Devops IDS Incident Response IPS Linux

Cyber Security Jobs in Carlsbad

0 Cyber Security Jobs in Carlsbad. Page 1 of 1

5 closed cyber security jobs in carlsbad:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Carlsbad

0 Cyber Security Jobs in Carlsbad. Page 1 of 1

5 closed cyber security jobs in carlsbad:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter