Senior Cyber Security Engineer - San Diego, CA or Boulder, CO (Clearance Needed) Qualcomm
San Diego, CA

Job Description

Job Detail

Job Id N1968507 Job Title Senior Cyber Security Engineer - San Diego, CA or Boulder, CO (Clearance Needed) Post Date 04/01/2019 Company - Division Qualcomm Technologies, Inc. - Government

Job Area Information Technology

Location California - San Diego

Job Overview QUALCOMM's Cyber Security Solutions (QCSS) division develops special products based on its wireless terrestrial and satellite communication technologies for the military, federal, local, and foreign governments. QCSS also does specialized work for the US government based on QUALCOMM's core technologies.

Applicants selected will be subject to a government security investigation and must meet eligibility requirements to obtain and maintain a Secret or Top Secret clearance

This position will reside in a team that provides comprehensive information technology support to our government programs.

Responsibilities include but not limited to:

Provide education to existing staff on the emerging trends of security operations methodology, information security concepts, security analysis and monitoring, incident response methodologies, and investigative tools and techniques Assist with the architecture and design of security controls, security monitoring and analysis technologies/processes, and cyber-response technologies/processes Manage issues resulting from investigation, work collaboratively with technical and business leads to follow up accordingly to security incident management procedures and processes, and assist in development and resolution of daily incident reports Provide solid technical expertise to support Business Response Teams including the forensic analysis of network traffic, network packets and log files Develop IOC detection signatures for enterprise monitoring tools Handle events such as identifying user security issues, extensive troubleshooting, and coordinating resolution or restore using a variety of applications and testing tools. The events can include hardware/software failures as well as security breaches, threats, or network connectivity issues. Regularly provide high-level proactive technical support, including security configurations, security policy modification recommendation, and diagnostics of remote network security issues. Monitor daily security relevant events; investigate and respond Provide comprehensive, multi-disciplined IT support to QCSS's classified and unclassified networks Recommend solutions in accordance with USG/industry best practices Evaluate and implement new technologies Perform upgrades, new installations, enhancements, and configuration changes Develop and maintain thorough documentation Provide on-call and/or after hours support as needed Must be able to interact with Engineering Leads and Engineers in meetings and individually to plan sustaining support" id="hdnJobOverview" />

QUALCOMM's Cyber Security Solutions (QCSS) division develops special products based on its wireless terrestrial and satellite communication technologies for the military, federal, local, and foreign governments. QCSS also does specialized work for the US government based on QUALCOMM's core technologies.

Applicants selected will be subject to a government security investigation and must meet eligibility requirements to obtain and maintain a Secret or Top Secret clearance

This position will reside in a team that provides comprehensive information technology support to our government programs.

Responsibilities include but not limited to:

Provide education to existing staff on the emerging trends of security operations methodology, information security concepts, security analysis and monitoring, incident response methodologies, and investigative tools and techniques Assist with the architecture and design of security controls, security monitoring and analysis technologies/processes, and cyber-response technologies/processes Manage issues resulting from investigation, work collaboratively with technical and business leads to follow up accordingly to security incident management procedures and processes, and assist in development and resolution of daily incident reports Provide solid technical expertise to support Business Response Teams including the forensic analysis of network traffic, network packets and log files Develop IOC detection signatures for enterprise monitoring tools Handle events such as identifying user security issues, extensive troubleshooting, and coordinating resolution or restore using a variety of applications and testing tools. The events can include hardware/software failures as well as security breaches, threats, or network connectivity issues. Regularly provide high-level proactive technical support, including security configurations, security policy modification recommendation, and diagnostics of remote network security issues. Monitor daily security relevant events; investigate and respond Provide comprehensive, multi-disciplined IT support to QCSS's classified and unclassified networks Recommend solutions in accordance with USG/industry best practices Evaluate and implement new technologies Perform upgrades, new installations, enhancements, and configuration changes Develop and maintain thorough documentation Provide on-call and/or after hours support as needed Must be able to interact with Engineering Leads and Engineers in meetings and individually to plan sustaining support All Qualcomm employees are expected to actively support diversity on their teams, and in the Company. Minimum Qualifications *Active Secret/Top Secret clearance required*

3-5 years of experience in the following areas:

Log collection / correlation / reporting / dashboards / alerting with Splunk

Continuous vulnerability assessment and remediation (Tenable SecurityCenter, Retina, Nexpose, Nessus, etc )

Programming/scripting experience (Python, C/C++, Java, Shell, Perl)

Enterprise Network Security Engineering (Palo Alto, Cisco ASA, routing, switching, NAC)

Windows/Linux/Unix operating system security

Network security monitoring, traffic analysis, packet capture

Security event monitoring (SIEM, Splunk)

Network and Host Intrusion Prevention/Detection (Sourcefire, Snort, Cisco IPS, McAfee HIPS, etc)" id="hdnMinimumQualifications" />

* Active Secret/Top Secret clearance required*

3-5 years of experience in the following areas:

Log collection / correlation / reporting / dashboards / alerting with Splunk

Continuous vulnerability assessment and remediation (Tenable SecurityCenter, Retina, Nexpose, Nessus, etc )

Programming/scripting experience (Python, C/C++, Java, Shell, Perl)

Enterprise Network Security Engineering (Palo Alto, Cisco ASA, routing, switching, NAC)

Windows/Linux/Unix operating system security

Network security monitoring, traffic analysis, packet capture

Security event monitoring (SIEM, Splunk)

Network and Host Intrusion Prevention/Detection (Sourcefire, Snort, Cisco IPS, McAfee HIPS, etc) Preferred Qualifications Solid experience with or a strong desire to learn: Security Orchestration and Automation (Phantom, Puppet, Chef, etc) DevSecOps processes and CI/CD tooling Splunk Enterprise Security and User Behavior Analytics Container technology security (Docker, Kubernetes, etc) " id="hdnPreferredQualifications" />

Solid experience with or a strong desire to learn:

Security Orchestration and Automation (Phantom, Puppet, Chef, etc) DevSecOps processes and CI/CD tooling Splunk Enterprise Security and User Behavior Analytics Container technology security (Docker, Kubernetes, etc) Education Requirements Preferred: Bachelor's, Computer Science or equivalent experience Keywords splunk, phantom, automation, python, security, cyber