Job Purpose :

As a member of Corporate Information Security - Security Engineering & Architecture team, you will report to the Team lead of Security Engineering. This role involves close collaboration with cross-functional teams across Hexagon to operate, enhance, and maintain enterprise-class security solutions that safeguard Hexagon's systems and data.

The Cybersecurity Engineer will play a vital role in ensuring that Hexagon's security posture remains resilient, by managing critical security technologies, conducting assessments, and driving continuous improvement initiatives. The Cybersecurity role is a bridge between the Security Architecture and the Security Engineering team, providing an engineering approach to the architecture initiatives.

Security Stack :

- Event Detection and Response (EDR) : Protecting all Windows, macOS, and Linux endpoints and servers.

- Endpoint Privilege Management : Deployed to parts of the Windows endpoints.

- Network Detection and Response (NDR) : Deployed to parts of the Hexagon Network.

- Internal PKI : Public Key Infrastructure used for internal purposes.

- Vulnerability Management : Vulnerability identification agent deployed to servers.

- Vulnerability orchestration platform : Used to correlate multiple scanners and penetration testings.

Incident Response :

- Investigation, triage, and analysis of time-sensitive security incidents.

- Coordinate with IT operational resources on proper IT hygiene, closing coverage gaps, and addressing lack of visibility.

- Coordinate with IT operational resources on incident response, including containment, internal communication, eradication, and recovery.

Responsibilities :

- Troubleshoot performance issues caused by security tools.

- Contribute to design, implement, and improve integrations between Hexagon security and IT components.

- Develop automations that provide best practices, security improvements, visibility, and reporting.

- Participate in Proof-of-Concept initiatives for new systems, with an emphasis on automation, integration, and operational efficiency.

Skills & Experience :

- In-depth knowledge of network protocols, network/application security, operating systems, and system services.

- Proficiency in Web/host-based application firewalls, IPS, IDS, NDR, anti-malware, and EDR technologies.

- Understanding of APIs (consumer/developer) and integration/automation concepts.

- Security of cloud services (IaaS/PaaS/SaaS).

- Proficient in scripting (PowerShell, Python, Bash) and Cloud IaC environments.

Must-Have :

- Minimum 4 years' experience in a cybersecurity engineering role.

- Experience securing on-premise and cloud environments (Windows and Linux).

- Office 365 Security knowledge.

- Hands-on experience with security tools (EDR, NDR, SIEM, etc.).

- Technical capabilities in IT systems and working with IT teams.